7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
6.9 Medium
AI Score
Confidence
High
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
45.1%
Pablo Neira Ayuso discovered a flaw in the credentials of netlink messages.
An unprivileged local attacker could exploit this by getting a netlink
based service, that relies on netlink credentials, to perform privileged
actions. (CVE-2012-3520)
Mathias Krause discovered information leak in the Linux kernelβs compat
ioctl interface. A local user could exploit the flaw to examine parts of
kernel stack memory (CVE-2012-6539)
Mathias Krause discovered an information leak in the Linux kernelβs
getsockopt for IP_VS_SO_GET_TIMEOUT. A local user could exploit this flaw
to examine parts of kernel stack memory. (CVE-2012-6540)
Mathias Krause discovered an information leak in the Linux kernelβs
getsockopt implementation for the Datagram Congestion Control Protocol
(DCCP). A local user could exploit this flaw to examine some of the
kernelβs stack memory. (CVE-2012-6541)
Mathias Krause discovered an information leak in the Linux kernelβs
getsockname implementation for Logical Link Layer (llc) sockets. A local
user could exploit this flaw to examine some of the kernelβs stack memory.
(CVE-2012-6542)
Mathias Krause discovered information leaks in the Linux kernelβs Bluetooth
Logical Link Control and Adaptation Protocol (L2CAP) implementation. A
local user could exploit these flaws to examine some of the kernelβs stack
memory. (CVE-2012-6544)
Mathias Krause discovered information leaks in the Linux kernelβs Bluetooth
RFCOMM protocol implementation. A local user could exploit these flaws to
examine parts of kernel memory. (CVE-2012-6545)
Mathias Krause discovered information leaks in the Linux kernelβs
Asynchronous Transfer Mode (ATM) networking stack. A local user could
exploit these flaws to examine some parts of kernel memory. (CVE-2012-6546)
A flaw was discovered in how netlink sockets validate message origins. A
local attacker could exploit this flaw to send netlink message
notifications, with spoofed credentials, to subscribed tasks.
(CVE-2012-6689)
Mathias Krause discover an error in Linux kernelβs Datagram Congestion
Control Protocol (DCCP) Congestion Control Identifier (CCID) use. A local
attack could exploit this flaw to cause a denial of service (crash) and
potentially escalate privileges if the user can mmap page 0.
(CVE-2013-1827)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 12.04 | noarch | linux-image-3.2.0-1420-omap4 | <Β 3.2.0-1420.27 | UNKNOWN |
Ubuntu | 12.04 | noarch | block-modules-3.2.0-1420-omap4-di | <Β 3.2.0-1420.27 | UNKNOWN |
Ubuntu | 12.04 | noarch | crypto-modules-3.2.0-1420-omap4-di | <Β 3.2.0-1420.27 | UNKNOWN |
Ubuntu | 12.04 | noarch | fat-modules-3.2.0-1420-omap4-di | <Β 3.2.0-1420.27 | UNKNOWN |
Ubuntu | 12.04 | noarch | fs-core-modules-3.2.0-1420-omap4-di | <Β 3.2.0-1420.27 | UNKNOWN |
Ubuntu | 12.04 | noarch | fs-secondary-modules-3.2.0-1420-omap4-di | <Β 3.2.0-1420.27 | UNKNOWN |
Ubuntu | 12.04 | noarch | input-modules-3.2.0-1420-omap4-di | <Β 3.2.0-1420.27 | UNKNOWN |
Ubuntu | 12.04 | noarch | irda-modules-3.2.0-1420-omap4-di | <Β 3.2.0-1420.27 | UNKNOWN |
Ubuntu | 12.04 | noarch | kernel-image-3.2.0-1420-omap4-di | <Β 3.2.0-1420.27 | UNKNOWN |
Ubuntu | 12.04 | noarch | linux-headers-3.2.0-1420 | <Β 3.2.0-1420.27 | UNKNOWN |
ubuntu.com/security/CVE-2012-3520
ubuntu.com/security/CVE-2012-6539
ubuntu.com/security/CVE-2012-6540
ubuntu.com/security/CVE-2012-6541
ubuntu.com/security/CVE-2012-6542
ubuntu.com/security/CVE-2012-6544
ubuntu.com/security/CVE-2012-6545
ubuntu.com/security/CVE-2012-6546
ubuntu.com/security/CVE-2012-6689
ubuntu.com/security/CVE-2013-1827
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
6.9 Medium
AI Score
Confidence
High
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
45.1%