Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2012-4467
HistoryOct 10, 2012 - 9:55 p.m.

CVE-2012-4467

2012-10-1021:55:00
Debian Security Bug Tracker
security-tracker.debian.org
18

6.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:N/A:C

0.0004 Low

EPSS

Percentile

5.1%

The (1) do_siocgstamp and (2) do_siocgstampns functions in net/socket.c in the Linux kernel before 3.5.4 use an incorrect argument order, which allows local users to obtain sensitive information from kernel memory or cause a denial of service (system crash) via a crafted ioctl call.

6.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:N/A:C

0.0004 Low

EPSS

Percentile

5.1%

Related for DEBIANCVE:CVE-2012-4467