Lucene search
HistoryDec 21, 2012 - 11:47 a.m.
CVE-2012-4444
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.2 Medium
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
79.2%
The ip6_frag_queue function in net/ipv6/reassembly.c in the Linux kernel before 2.6.36 allows remote attackers to bypass intended network restrictions via overlapping IPv6 fragments.
Affected configurations
Node
linuxlinux_kernelRange≤2.6.36rc8
ORlinuxlinux_kernelMatch2.6.30
ORlinuxlinux_kernelMatch2.6.30rc1
ORlinuxlinux_kernelMatch2.6.30rc2
ORlinuxlinux_kernelMatch2.6.30rc3
ORlinuxlinux_kernelMatch2.6.30rc4
ORlinuxlinux_kernelMatch2.6.30rc4x86_32
ORlinuxlinux_kernelMatch2.6.30rc5
ORlinuxlinux_kernelMatch2.6.30rc6
ORlinuxlinux_kernelMatch2.6.30rc7
ORlinuxlinux_kernelMatch2.6.30rc8
ORlinuxlinux_kernelMatch2.6.30.1
ORlinuxlinux_kernelMatch2.6.30.2
ORlinuxlinux_kernelMatch2.6.30.3
ORlinuxlinux_kernelMatch2.6.30.4
ORlinuxlinux_kernelMatch2.6.30.5
ORlinuxlinux_kernelMatch2.6.30.6
ORlinuxlinux_kernelMatch2.6.30.7
ORlinuxlinux_kernelMatch2.6.30.8
ORlinuxlinux_kernelMatch2.6.30.9
ORlinuxlinux_kernelMatch2.6.30.10
ORlinuxlinux_kernelMatch2.6.31
ORlinuxlinux_kernelMatch2.6.31rc1
ORlinuxlinux_kernelMatch2.6.31rc2
ORlinuxlinux_kernelMatch2.6.31rc3
ORlinuxlinux_kernelMatch2.6.31rc4
ORlinuxlinux_kernelMatch2.6.31rc5
ORlinuxlinux_kernelMatch2.6.31rc6
ORlinuxlinux_kernelMatch2.6.31rc7
ORlinuxlinux_kernelMatch2.6.31rc8
ORlinuxlinux_kernelMatch2.6.31rc9
ORlinuxlinux_kernelMatch2.6.31-rc2
ORlinuxlinux_kernelMatch2.6.31-rc3
ORlinuxlinux_kernelMatch2.6.31-rc4
ORlinuxlinux_kernelMatch2.6.31-rc5
ORlinuxlinux_kernelMatch2.6.31-rc6
ORlinuxlinux_kernelMatch2.6.31-rc7
ORlinuxlinux_kernelMatch2.6.31-rc8
ORlinuxlinux_kernelMatch2.6.31-rc9
ORlinuxlinux_kernelMatch2.6.31-rc10
ORlinuxlinux_kernelMatch2.6.31.1
ORlinuxlinux_kernelMatch2.6.31.2
ORlinuxlinux_kernelMatch2.6.31.3
ORlinuxlinux_kernelMatch2.6.31.4
ORlinuxlinux_kernelMatch2.6.31.5
ORlinuxlinux_kernelMatch2.6.31.6
ORlinuxlinux_kernelMatch2.6.31.7
ORlinuxlinux_kernelMatch2.6.31.8
ORlinuxlinux_kernelMatch2.6.31.9
ORlinuxlinux_kernelMatch2.6.31.10
ORlinuxlinux_kernelMatch2.6.31.11
ORlinuxlinux_kernelMatch2.6.31.12
ORlinuxlinux_kernelMatch2.6.31.13
ORlinuxlinux_kernelMatch2.6.31.14
ORlinuxlinux_kernelMatch2.6.32
ORlinuxlinux_kernelMatch2.6.32rc1
ORlinuxlinux_kernelMatch2.6.32rc3
ORlinuxlinux_kernelMatch2.6.32rc4
ORlinuxlinux_kernelMatch2.6.32rc5
ORlinuxlinux_kernelMatch2.6.32rc6
ORlinuxlinux_kernelMatch2.6.32rc7
ORlinuxlinux_kernelMatch2.6.32rc8
ORlinuxlinux_kernelMatch2.6.32.1
ORlinuxlinux_kernelMatch2.6.32.2
ORlinuxlinux_kernelMatch2.6.32.3
ORlinuxlinux_kernelMatch2.6.32.4
ORlinuxlinux_kernelMatch2.6.32.5
ORlinuxlinux_kernelMatch2.6.32.6
ORlinuxlinux_kernelMatch2.6.32.7
ORlinuxlinux_kernelMatch2.6.32.8
ORlinuxlinux_kernelMatch2.6.32.9
ORlinuxlinux_kernelMatch2.6.32.10
ORlinuxlinux_kernelMatch2.6.32.11
ORlinuxlinux_kernelMatch2.6.32.12
ORlinuxlinux_kernelMatch2.6.32.13
ORlinuxlinux_kernelMatch2.6.32.14
ORlinuxlinux_kernelMatch2.6.32.15
ORlinuxlinux_kernelMatch2.6.32.16
ORlinuxlinux_kernelMatch2.6.32.17
ORlinuxlinux_kernelMatch2.6.32.18
ORlinuxlinux_kernelMatch2.6.32.19
ORlinuxlinux_kernelMatch2.6.32.20
ORlinuxlinux_kernelMatch2.6.32.21
ORlinuxlinux_kernelMatch2.6.32.22
ORlinuxlinux_kernelMatch2.6.32.23
ORlinuxlinux_kernelMatch2.6.32.24
ORlinuxlinux_kernelMatch2.6.32.25
ORlinuxlinux_kernelMatch2.6.32.26
ORlinuxlinux_kernelMatch2.6.32.27
ORlinuxlinux_kernelMatch2.6.32.28
ORlinuxlinux_kernelMatch2.6.32.29
ORlinuxlinux_kernelMatch2.6.32.30
ORlinuxlinux_kernelMatch2.6.32.31
ORlinuxlinux_kernelMatch2.6.32.32
ORlinuxlinux_kernelMatch2.6.32.33
ORlinuxlinux_kernelMatch2.6.32.34
ORlinuxlinux_kernelMatch2.6.32.35
ORlinuxlinux_kernelMatch2.6.32.36
ORlinuxlinux_kernelMatch2.6.32.37
ORlinuxlinux_kernelMatch2.6.32.38
ORlinuxlinux_kernelMatch2.6.32.39
ORlinuxlinux_kernelMatch2.6.32.40
ORlinuxlinux_kernelMatch2.6.32.41
ORlinuxlinux_kernelMatch2.6.32.42
ORlinuxlinux_kernelMatch2.6.32.43
ORlinuxlinux_kernelMatch2.6.32.44
ORlinuxlinux_kernelMatch2.6.32.45
ORlinuxlinux_kernelMatch2.6.32.46
ORlinuxlinux_kernelMatch2.6.32.47
ORlinuxlinux_kernelMatch2.6.32.48
ORlinuxlinux_kernelMatch2.6.32.49
ORlinuxlinux_kernelMatch2.6.32.50
ORlinuxlinux_kernelMatch2.6.32.51
ORlinuxlinux_kernelMatch2.6.32.52
ORlinuxlinux_kernelMatch2.6.32.53
ORlinuxlinux_kernelMatch2.6.32.54
ORlinuxlinux_kernelMatch2.6.32.55
ORlinuxlinux_kernelMatch2.6.32.56
ORlinuxlinux_kernelMatch2.6.32.57
ORlinuxlinux_kernelMatch2.6.32.58
ORlinuxlinux_kernelMatch2.6.33
ORlinuxlinux_kernelMatch2.6.33rc1
ORlinuxlinux_kernelMatch2.6.33rc2
ORlinuxlinux_kernelMatch2.6.33rc3
ORlinuxlinux_kernelMatch2.6.33rc4
ORlinuxlinux_kernelMatch2.6.33rc5
ORlinuxlinux_kernelMatch2.6.33rc6
ORlinuxlinux_kernelMatch2.6.33rc7
ORlinuxlinux_kernelMatch2.6.33rc8
ORlinuxlinux_kernelMatch2.6.33.1
ORlinuxlinux_kernelMatch2.6.33.2
ORlinuxlinux_kernelMatch2.6.33.3
ORlinuxlinux_kernelMatch2.6.33.4
ORlinuxlinux_kernelMatch2.6.33.5
ORlinuxlinux_kernelMatch2.6.33.6
ORlinuxlinux_kernelMatch2.6.33.7
ORlinuxlinux_kernelMatch2.6.33.8
ORlinuxlinux_kernelMatch2.6.33.9
ORlinuxlinux_kernelMatch2.6.33.10
ORlinuxlinux_kernelMatch2.6.33.11
ORlinuxlinux_kernelMatch2.6.33.12
ORlinuxlinux_kernelMatch2.6.33.13
ORlinuxlinux_kernelMatch2.6.33.14
ORlinuxlinux_kernelMatch2.6.33.15
ORlinuxlinux_kernelMatch2.6.33.16
ORlinuxlinux_kernelMatch2.6.33.17
ORlinuxlinux_kernelMatch2.6.33.18
ORlinuxlinux_kernelMatch2.6.33.19
ORlinuxlinux_kernelMatch2.6.33.20
ORlinuxlinux_kernelMatch2.6.34
ORlinuxlinux_kernelMatch2.6.34rc1
ORlinuxlinux_kernelMatch2.6.34rc2
ORlinuxlinux_kernelMatch2.6.34rc3
ORlinuxlinux_kernelMatch2.6.34rc4
ORlinuxlinux_kernelMatch2.6.34rc5
ORlinuxlinux_kernelMatch2.6.34rc6
ORlinuxlinux_kernelMatch2.6.34rc7
ORlinuxlinux_kernelMatch2.6.34.1
ORlinuxlinux_kernelMatch2.6.34.2
ORlinuxlinux_kernelMatch2.6.34.3
ORlinuxlinux_kernelMatch2.6.34.4
ORlinuxlinux_kernelMatch2.6.34.5
ORlinuxlinux_kernelMatch2.6.34.6
ORlinuxlinux_kernelMatch2.6.34.7
ORlinuxlinux_kernelMatch2.6.34.8
ORlinuxlinux_kernelMatch2.6.34.9
ORlinuxlinux_kernelMatch2.6.34.10
ORlinuxlinux_kernelMatch2.6.35
ORlinuxlinux_kernelMatch2.6.35rc1
ORlinuxlinux_kernelMatch2.6.35rc2
ORlinuxlinux_kernelMatch2.6.35rc3
ORlinuxlinux_kernelMatch2.6.35rc4
ORlinuxlinux_kernelMatch2.6.35rc5
ORlinuxlinux_kernelMatch2.6.35rc6
ORlinuxlinux_kernelMatch2.6.35.1
ORlinuxlinux_kernelMatch2.6.35.2
ORlinuxlinux_kernelMatch2.6.35.3
ORlinuxlinux_kernelMatch2.6.35.4
ORlinuxlinux_kernelMatch2.6.35.5
ORlinuxlinux_kernelMatch2.6.35.6
ORlinuxlinux_kernelMatch2.6.35.7
ORlinuxlinux_kernelMatch2.6.35.8
ORlinuxlinux_kernelMatch2.6.35.9
ORlinuxlinux_kernelMatch2.6.35.10
ORlinuxlinux_kernelMatch2.6.35.11
ORlinuxlinux_kernelMatch2.6.35.12
ORlinuxlinux_kernelMatch2.6.35.13
ORlinuxlinux_kernelMatch2.6.36rc1
ORlinuxlinux_kernelMatch2.6.36rc2
ORlinuxlinux_kernelMatch2.6.36rc3
ORlinuxlinux_kernelMatch2.6.36rc4
ORlinuxlinux_kernelMatch2.6.36rc5
ORlinuxlinux_kernelMatch2.6.36rc6
ORlinuxlinux_kernelMatch2.6.36rc7
References
ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=70789d7052239992824628db8133de08dc78e593
lists.opensuse.org/opensuse-security-announce/2013-06/msg00000.html
rhn.redhat.com/errata/RHSA-2012-1580.html
www.openwall.com/lists/oss-security/2012/11/09/2
www.ubuntu.com/usn/USN-1660-1
www.ubuntu.com/usn/USN-1661-1
bugzilla.redhat.com/show_bug.cgi?id=874835
github.com/torvalds/linux/commit/70789d7052239992824628db8133de08dc78e593
media.blackhat.com/bh-eu-12/Atlasis/bh-eu-12-Atlasis-Attacking_IPv6-WP.pdf
Related
nessus
nessus
Ubuntu 8.04 LTS : linux vulnerability (USN-1660-1)
2012-12-11 00:00:00
Ubuntu 10.04 LTS : linux-ec2 vulnerability (USN-1664-1)
2012-12-13 00:00:00
Ubuntu 10.04 LTS : linux vulnerability (USN-1661-1)
2012-12-11 00:00:00
seebug
seebug
Linux kernel ipv6分片拒绝服务漏洞(CVE-2012-4444)
2012-12-24 00:00:00
Linux Kernel IPv6远程安全绕过漏洞(CVE-2012-4444)
2012-12-13 00:00:00
cve
cve
CVE-2012-4444
2012-12-21 11:47:36
ubuntu
ubuntu
Linux kernel vulnerability
2012-12-11 00:00:00
Linux kernel vulnerability
2012-12-11 00:00:00
Linux kernel (EC2) vulnerability
2012-12-13 00:00:00
prion
prion
Design/Logic Flaw
2012-12-21 11:47:00
openvas
openvas
Ubuntu Update for linux USN-1660-1
2012-12-11 00:00:00
Ubuntu: Security Advisory (USN-1660-1)
2012-12-11 00:00:00
Ubuntu Update for linux USN-1661-1
2012-12-11 00:00:00
securityvulns
securityvulns
[USN-1660-1] Linux kernel vulnerability
2012-12-12 00:00:00
Linux kernel IPv6 filterin bypass
2012-12-12 00:00:00
ubuntucve
ubuntucve
CVE-2012-4444
2012-11-09 00:00:00
debiancve
debiancve
CVE-2012-4444
2012-12-21 11:47:36
cvelist
cvelist
CVE-2012-4444
2012-12-21 11:00:00
suse
suse
Security update for Linux kernel (important)
2013-06-04 23:04:12
redhat
redhat
(RHSA-2013:0168) Moderate: kernel security and bug fix update
2013-01-22 00:00:00
(RHSA-2012:1580) Moderate: kernel security, bug fix and enhancement update
2012-12-18 00:00:00
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2012-12-20 00:00:00
kernel security and bug fix update
2013-01-22 00:00:00
1
2013-01-22 00:00:00
centos
centos
kernel security update
2013-01-23 11:37:33
kernel, perf, python security update
2012-12-19 16:28:42
amazon
amazon
Medium: kernel, nvidia
2013-01-14 01:14:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.2 Medium
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
79.2%
Related for NVD:CVE-2012-4444