CVE-2012-2383

2012-06-1310:24:56

CWE-189

[email protected]

web.nvd.nist.gov

cve-2012-2383

linux kernel

integer overflow

i915_gem_execbuffer2

denial of service

nvd

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Integer overflow in the i915_gem_execbuffer2 function in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 3.3.5 on 32-bit platforms allows local users to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted ioctl call.

Affected configurations

NVD

Node

linuxlinux_kernelRange≤3.3.4

linuxlinux_kernelMatch3.3

linuxlinux_kernelMatch3.3rc1

linuxlinux_kernelMatch3.3rc2

linuxlinux_kernelMatch3.3rc3

linuxlinux_kernelMatch3.3rc4

linuxlinux_kernelMatch3.3rc5

linuxlinux_kernelMatch3.3rc6

linuxlinux_kernelMatch3.3rc7

linuxlinux_kernelMatch3.3.1

linuxlinux_kernelMatch3.3.2

linuxlinux_kernelMatch3.3.3

CPENameOperatorVersion
linux:linux_kernellinux linux kernelle3.3.4
linux:linux_kernellinux linux kerneleq3.3
linux:linux_kernellinux linux kerneleq3.3.1
linux:linux_kernellinux linux kerneleq3.3.2
linux:linux_kernellinux linux kerneleq3.3.3

CPE	Name	Operator	Version
linux:linux_kernel	linux linux kernel	le	3.3.4
linux:linux_kernel	linux linux kernel	eq	3.3
linux:linux_kernel	linux linux kernel	eq	3.3.1
linux:linux_kernel	linux linux kernel	eq	3.3.2
linux:linux_kernel	linux linux kernel	eq	3.3.3