Ubuntu.comUB:CVE-2012-0044CVE-2012-0044
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
Percentile
5.1%
Integer overflow in the drm_mode_dirtyfb_ioctl function in
drivers/gpu/drm/drm_crtc.c in the Direct Rendering Manager (DRM) subsystem
in the Linux kernel before 3.1.5 allows local users to gain privileges or
cause a denial of service (memory corruption) via a crafted ioctl call.
Bugs
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 10.04 | noarch | linux | < 2.6.32-42.96 | UNKNOWN |
| ubuntu | 10.10 | noarch | linux | < 2.6.35-32.65 | UNKNOWN |
| ubuntu | 11.04 | noarch | linux | < 2.6.38-13.55 | UNKNOWN |
| ubuntu | 11.10 | noarch | linux | < 3.0.0-15.24 | UNKNOWN |
| ubuntu | 10.04 | noarch | linux-ec2 | < 2.6.32-347.53 | UNKNOWN |
| ubuntu | 10.04 | noarch | linux-lts-backport-maverick | < 2.6.35-32.65~lucid1 | UNKNOWN |
| ubuntu | 10.04 | noarch | linux-lts-backport-natty | < 2.6.38-13.55~lucid1 | UNKNOWN |
| ubuntu | 10.04 | noarch | linux-lts-backport-oneiric | < 3.0.0-15.25~lucid1 | UNKNOWN |
| ubuntu | 10.10 | noarch | linux-ti-omap4 | < 2.6.35-903.30 | UNKNOWN |
| ubuntu | 11.04 | noarch | linux-ti-omap4 | < 2.6.38-1209.21 | UNKNOWN |
References
launchpad.net/bugs/cve/CVE-2012-0044
nvd.nist.gov/vuln/detail/CVE-2012-0044
security-tracker.debian.org/tracker/CVE-2012-0044
ubuntu.com/security/notices/USN-1212-1
ubuntu.com/security/notices/USN-1330-1
ubuntu.com/security/notices/USN-1336-1
ubuntu.com/security/notices/USN-1340-1
ubuntu.com/security/notices/USN-1356-1
ubuntu.com/security/notices/USN-1361-1
ubuntu.com/security/notices/USN-1362-1
ubuntu.com/security/notices/USN-1386-1
ubuntu.com/security/notices/USN-1387-1
ubuntu.com/security/notices/USN-1394-1
ubuntu.com/security/notices/USN-1555-1
ubuntu.com/security/notices/USN-1556-1
www.cve.org/CVERecord?id=CVE-2012-0044
Related
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
Percentile
5.1%