Lucene search

K
cvelistRedhatCVELIST:CVE-2012-4542
HistoryFeb 28, 2013 - 7:00 p.m.

CVE-2012-4542

2013-02-2819:00:00
redhat
www.cve.org
8

AI Score

7.1

Confidence

High

EPSS

0

Percentile

5.1%

block/scsi_ioctl.c in the Linux kernel through 3.8 does not properly consider the SCSI device class during authorization of SCSI commands, which allows local users to bypass intended access restrictions via an SG_IO ioctl call that leverages overlapping opcodes.

AI Score

7.1

Confidence

High

EPSS

0

Percentile

5.1%