CVE-2012-0056
7.4 High
AI Score
Confidence
High
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
46.0%
The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when writing to /proc/<pid>/mem, which allows local users to gain privileges by modifying process memory, as demonstrated by Mempodipper.
| CPE | Name | Operator | Version |
|---|---|---|---|
| linux:linux_kernel | linux linux kernel | lt | 3.2.2 |
| linux:linux_kernel | linux linux kernel | lt | 3.0.18 |
References
blog.zx2c4.com/749
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=e268337dfe26dfc7efd422a804dbb27977a3cccc
secunia.com/advisories/47708
ubuntu.com/usn/usn-1336-1
www.kb.cert.org/vuls/id/470151
www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.2
www.openwall.com/lists/oss-security/2012/01/18/1
www.openwall.com/lists/oss-security/2012/01/18/2
www.openwall.com/lists/oss-security/2012/01/19/4
www.openwall.com/lists/oss-security/2012/01/22/4
www.redhat.com/support/errata/RHSA-2012-0052.html
www.redhat.com/support/errata/RHSA-2012-0061.html
www.securityfocus.com/bid/51625
bugzilla.redhat.com/show_bug.cgi?id=782642
Social References
More
Related
7.4 High
AI Score
Confidence
High
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
46.0%