CVE-2012-2119
kernel: macvtap: zerocopy: vector length is not validated before pinning user pages
Severity Score
5.2
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Buffer overflow in the macvtap device driver in the Linux kernel before 3.4.5, when running in certain configurations, allows privileged KVM guest users to cause a denial of service (crash) via a long descriptor with a long vector length.
Desbordamiento de búfer en el controlador de dispositivo macvtap en el kernel de Linux anteriores a v3.4.5, cuando se ejecuta en ciertas configuraciones, permite a los usuarios invitados KVM privilegiados causar una denegación de servicio (caída) a través de un descriptor largo con una longitud de vector de larga.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2012-04-04 CVE Reserved
- 2012-06-18 CVE Published
- 2024-08-06 CVE Updated
- 2024-08-22 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (12)
| URL | Tag | Source |
|---|---|---|
| http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=814278 | X_refsource_confirm | |
| http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b92946e2919134ebe2a4083e4302236295ea2a73 | X_refsource_confirm | |
| http://marc.info/?l=linux-netdev&m=133455718001608&w=2 | Mailing List | |
| http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.5 | X_refsource_confirm | |
| http://www.openwall.com/lists/oss-security/2012/04/19/14 | Mailing List |
|
| https://github.com/torvalds/linux/commit/b92946e2919134ebe2a4083e4302236295ea2a73 | X_refsource_confirm | |
| https://oss.oracle.com/git/?p=redpatch.git%3Ba=commit%3Bh=4aae94d1c7b32316911c86176c0ed4f8ed62da73 | X_refsource_confirm |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html | 2023-02-13 | |
| http://rhn.redhat.com/errata/RHSA-2012-0743.html | 2023-02-13 | |
| http://ubuntu.com/usn/usn-1529-1 | 2023-02-13 | |
| https://access.redhat.com/security/cve/CVE-2012-2119 | 2012-06-18 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=814278 | 2012-06-18 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | <= 3.4.4 Search vendor "Linux" for product "Linux Kernel" and version " <= 3.4.4" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 3.4 Search vendor "Linux" for product "Linux Kernel" and version "3.4" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 3.4.1 Search vendor "Linux" for product "Linux Kernel" and version "3.4.1" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 3.4.2 Search vendor "Linux" for product "Linux Kernel" and version "3.4.2" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 3.4.3 Search vendor "Linux" for product "Linux Kernel" and version "3.4.3" | - |
Affected
| ||||||