Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2012-2669

Опубликовано: 27 дек. 2012
Источник: nvd
CVSS2: 2.1
EPSS Низкий

Описание

The main function in tools/hv/hv_kvp_daemon.c in hypervkvpd, as distributed in the Linux kernel before 3.4.5, does not validate the origin of Netlink messages, which allows local users to spoof Netlink communication via a crafted connector message.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Версия до 3.4.4 (включая)
cpe:2.3:o:linux:linux_kernel:3.4.1:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:3.4.2:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:3.4.3:*:*:*:*:*:*:*

EPSS

Процентиль: 30%
0.00111
Низкий

2.1 Low

CVSS2

Дефекты

CWE-20

Связанные уязвимости

ubuntu
около 13 лет назад

The main function in tools/hv/hv_kvp_daemon.c in hypervkvpd, as distributed in the Linux kernel before 3.4.5, does not validate the origin of Netlink messages, which allows local users to spoof Netlink communication via a crafted connector message.

redhat
больше 13 лет назад

The main function in tools/hv/hv_kvp_daemon.c in hypervkvpd, as distributed in the Linux kernel before 3.4.5, does not validate the origin of Netlink messages, which allows local users to spoof Netlink communication via a crafted connector message.

debian
около 13 лет назад

The main function in tools/hv/hv_kvp_daemon.c in hypervkvpd, as distri ...

github
больше 3 лет назад

The main function in tools/hv/hv_kvp_daemon.c in hypervkvpd, as distributed in the Linux kernel before 3.4.5, does not validate the origin of Netlink messages, which allows local users to spoof Netlink communication via a crafted connector message.

EPSS

Процентиль: 30%
0.00111
Низкий

2.1 Low

CVSS2

Дефекты

CWE-20