Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2012-0056
HistoryJan 27, 2012 - 3:55 p.m.

CVE-2012-0056

2012-01-2715:55:04
CWE-264
[email protected]
web.nvd.nist.gov
11

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.3

Confidence

Low

EPSS

0.001

Percentile

46.9%

JSON

The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when writing to /proc/<pid>/mem, which allows local users to gain privileges by modifying process memory, as demonstrated by Mempodipper.

Affected configurations

Nvd
Node
linuxlinux_kernelRange2.6.39–3.0.18
OR
linuxlinux_kernelRange3.1–3.2.2
VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Related

nessus 14
prion 1
openvas 54
oraclelinux 2
myhack58 2
seebug 4
securityvulns 3
exploitpack 2
zdt 2
exploitdb 2
ubuntu 3
chrome 1
redhat 3
veracode 1
canvas 1
android 1
cert 1
ubuntucve 1
centos 1
thn 1
cve 1
cvelist 1
fedora 23
kitploit 1
nessus
nessus
Oracle Linux 6 : kernel (ELSA-2012-0052)
2013-07-12 00:00:00
Ubuntu 10.04 LTS : linux-lts-backport-oneiric vulnerability (USN-1342-1)
2012-01-26 00:00:00
Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20120123)
2012-08-01 00:00:00
prion
prion
Input validation
2012-01-27 15:55:00
openvas
openvas
RedHat Update for kernel RHSA-2012:0052-01
2012-07-09 00:00:00
CentOS Update for kernel CESA-2012:0052 centos6
2012-07-30 00:00:00
Ubuntu Update for linux USN-1336-1
2012-03-16 00:00:00
oraclelinux
oraclelinux
kernel security and bug fix update
2012-01-23 00:00:00
Unbreakable Enterprise kernel security and bug fix update
2012-01-24 00:00:00
myhack58
myhack58
Linux 2.6.39 to 3.2.0 explosion mention the right vulnerability-vulnerability warning-the black bar safety net
2012-03-08 00:00:00
Linux kernels >=2.6.39 local root exploit 0day-vulnerability warning-the black bar safety net
2012-01-25 00:00:00
seebug
seebug
Linux Local Root =&gt; 2.6.39 (32-bit &amp; 64-bit) - Mempodipper #2
2014-11-13 00:00:00
Linux Local Root => 2.6.39 (32-bit & 64-bit) - Mempodipper
2014-07-01 00:00:00
Mempodipper - Linux Local Root for &gt;=2.6.39, 32-bit and 64-bit
2012-01-23 00:00:00
securityvulns
securityvulns
Linux privilege escalation
2012-02-08 00:00:00
[USN-1364-1] Linux kernel &#40;OMAP4&#41; vulnerabilities
2012-02-15 00:00:00
Linux kernel multiple security vulnerabilities
2012-02-15 00:00:00
exploitpack
exploitpack
Linux Kernel 2.6.39 3.2.2 (Gentoo Ubuntu x86x64) - Mempodipper Local Privilege Escalation (1)
2012-01-23 00:00:00
Linux Kernel 2.6.39 3.2.2 (x86x64) - Mempodipper Local Privilege Escalation (2)
2012-01-12 00:00:00
zdt
zdt
Linux Kernel 2.6.18-374 Local root Exploit
2012-06-29 00:00:00
Mempodipper - Linux Local Root for >=2.6.39, 32-bit and 64-bit
2012-01-23 00:00:00
exploitdb
exploitdb
Linux Kernel 2.6.39 &lt; 3.2.2 (x86/x64) - &#039;Mempodipper&#039; Local Privilege Escalation (2)
2012-01-12 00:00:00
Linux Kernel 2.6.39 &lt; 3.2.2 (Gentoo / Ubuntu x86/x64) - &#039;Mempodipper&#039; Local Privilege Escalation (1)
2012-01-23 00:00:00
ubuntu
ubuntu
Linux kernel (Oneiric backport) vulnerability
2012-01-26 00:00:00
Linux kernel (OMAP4) vulnerabilities
2012-02-13 00:00:00
Linux kernel vulnerability
2012-01-23 00:00:00
chrome
chrome
Stable Channel Update for Chromebooks
2012-02-16 00:00:00
redhat
redhat
(RHSA-2012:0061) Important: kernel-rt security update
2012-01-24 00:00:00
(RHSA-2012:0052) Important: kernel security and bug fix update
2012-01-23 00:00:00
(RHSA-2012:0109) Important: rhev-hypervisor6 security and bug fix update
2012-02-15 00:00:00
veracode
veracode
Privilege Escalation
2020-04-10 01:06:51
canvas
canvas
Immunity Canvas: CVE_2012_0056
2012-01-27 15:55:00
android
android
mempodroid - mempodripper - mem exploit
2012-01-24 00:00:00
cert
cert
Linux Kernel local privilege escalation via SUID /proc/pid/mem write
2012-01-27 00:00:00
ubuntucve
ubuntucve
CVE-2012-0056
2012-01-19 00:00:00
centos
centos
kernel, perf, python security update
2012-01-24 20:01:50
thn
thn
CVE-2012-0056 Linux privilege escalation [Video Demonstration]
2012-01-28 19:55:00
cve
cve
CVE-2012-0056
2012-01-27 15:55:04
cvelist
cvelist
CVE-2012-0056
2012-01-27 15:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: kernel-3.2.1-3.fc16
2012-01-24 07:57:29
[SECURITY] Fedora 16 Update: kernel-3.2.5-3.fc16
2012-02-10 22:00:18
[SECURITY] Fedora 16 Update: kernel-3.2.9-1.fc16
2012-03-06 19:30:15
kitploit
kitploit
[Linux Exploit Suggester] Grab the Linux Operating Systems release version, and return a suggestive list of possible exploits
2013-08-29 00:48:00

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.3

Confidence

Low

EPSS

0.001

Percentile

46.9%

JSON
Related for NVD:CVE-2012-0056
nessus14prion1openvas54oraclelinux2myhack582seebug4securityvulns3exploitpack2zdt2exploitdb2ubuntu3chrome1redhat3veracode1canvas1android1cert1ubuntucve1centos1thn1cve1cvelist1fedora23kitploit1