Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2012-0056
HistoryJan 19, 2012 - 12:00 a.m.

CVE-2012-0056

2012-01-1900:00:00
ubuntu.com
ubuntu.com
14

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

46.0%

JSON

The mem_write function in the Linux kernel before 3.2.2, when ASLR is
disabled, does not properly check permissions when writing to
/proc/<pid>/mem, which allows local users to gain privileges by modifying
process memory, as demonstrated by Mempodipper.

Bugs

Notes

Author Note
mdeslaur RH says introduced by 198214a7ee, needs checking.
apw as the proposed fix actually changes behaviour significantly and the functionality is very new and thus less likely to be needed it has been decided to revert 198214a for oneiric (the only release affected) and monitor it in precise for release.
OSVersionArchitecturePackageVersionFilename
ubuntu11.10noarchlinux<Β 3.0.0-15.26UNKNOWN
ubuntu10.04noarchlinux-lts-backport-oneiric<Β 3.0.0-15.26~lucid1UNKNOWN
ubuntu11.10noarchlinux-ti-omap4<Β 3.0.0-1207.16UNKNOWN

Related

nessus 12
openvas 54
myhack58 2
prion 1
oraclelinux 2
redhat 3
seebug 4
veracode 1
chrome 1
exploitpack 2
securityvulns 3
ubuntu 3
android 1
canvas 1
thn 1
centos 1
cve 1
cert 1
exploitdb 2
fedora 23
kitploit 1
nessus
nessus
Oracle Linux 6 : kernel (ELSA-2012-0052)
2013-07-12 00:00:00
Ubuntu 10.04 LTS : linux-lts-backport-oneiric vulnerability (USN-1342-1)
2012-01-26 00:00:00
Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20120123)
2012-08-01 00:00:00
openvas
openvas
RedHat Update for kernel RHSA-2012:0052-01
2012-07-09 00:00:00
Ubuntu Update for linux USN-1336-1
2012-03-16 00:00:00
Ubuntu: Security Advisory (USN-1342-1)
2012-02-01 00:00:00
myhack58
myhack58
Linux 2.6.39 to 3.2.0 explosion mention the right vulnerability-vulnerability warning-the black bar safety net
2012-03-08 00:00:00
Linux kernels >=2.6.39 local root exploit 0day-vulnerability warning-the black bar safety net
2012-01-25 00:00:00
prion
prion
Input validation
2012-01-27 15:55:00
oraclelinux
oraclelinux
kernel security and bug fix update
2012-01-23 00:00:00
Unbreakable Enterprise kernel security and bug fix update
2012-01-24 00:00:00
redhat
redhat
(RHSA-2012:0061) Important: kernel-rt security update
2012-01-24 00:00:00
(RHSA-2012:0052) Important: kernel security and bug fix update
2012-01-23 00:00:00
(RHSA-2012:0109) Important: rhev-hypervisor6 security and bug fix update
2012-02-15 00:00:00
seebug
seebug
Linux Local Root => 2.6.39 (32-bit & 64-bit) - Mempodipper
2014-07-01 00:00:00
Linux Local Root =&gt; 2.6.39 (32-bit &amp; 64-bit) - Mempodipper #2
2014-11-13 00:00:00
Mempodipper - Linux Local Root for &gt;=2.6.39, 32-bit and 64-bit
2012-01-23 00:00:00
veracode
veracode
Privilege Escalation
2020-04-10 01:06:51
chrome
chrome
Stable Channel Update for Chromebooks
2012-02-16 00:00:00
exploitpack
exploitpack
Linux Kernel 2.6.39 3.2.2 (Gentoo Ubuntu x86x64) - Mempodipper Local Privilege Escalation (1)
2012-01-23 00:00:00
Linux Kernel 2.6.39 3.2.2 (x86x64) - Mempodipper Local Privilege Escalation (2)
2012-01-12 00:00:00
securityvulns
securityvulns
Linux privilege escalation
2012-02-08 00:00:00
[USN-1364-1] Linux kernel &#40;OMAP4&#41; vulnerabilities
2012-02-15 00:00:00
Linux kernel multiple security vulnerabilities
2012-02-15 00:00:00
ubuntu
ubuntu
Linux kernel (Oneiric backport) vulnerability
2012-01-26 00:00:00
Linux kernel (OMAP4) vulnerabilities
2012-02-13 00:00:00
Linux kernel vulnerability
2012-01-23 00:00:00
android
android
mempodroid - mempodripper - mem exploit
2012-01-24 00:00:00
canvas
canvas
Immunity Canvas: CVE_2012_0056
2012-01-27 15:55:00
thn
thn
CVE-2012-0056 Linux privilege escalation [Video Demonstration]
2012-01-28 19:55:00
centos
centos
kernel, perf, python security update
2012-01-24 20:01:50
cve
cve
CVE-2012-0056
2012-01-27 15:55:00
cert
cert
Linux Kernel local privilege escalation via SUID /proc/pid/mem write
2012-01-27 00:00:00
exploitdb
exploitdb
Linux Kernel 2.6.39 &lt; 3.2.2 (x86/x64) - &#039;Mempodipper&#039; Local Privilege Escalation (2)
2012-01-12 00:00:00
Linux Kernel 2.6.39 &lt; 3.2.2 (Gentoo / Ubuntu x86/x64) - &#039;Mempodipper&#039; Local Privilege Escalation (1)
2012-01-23 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: kernel-3.2.1-3.fc16
2012-01-24 07:57:29
[SECURITY] Fedora 16 Update: kernel-3.2.5-3.fc16
2012-02-10 22:00:18
[SECURITY] Fedora 16 Update: kernel-3.2.9-2.fc16
2012-03-10 21:50:48
kitploit
kitploit
[Linux Exploit Suggester] Grab the Linux Operating Systems release version, and return a suggestive list of possible exploits
2013-08-29 00:48:00

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

46.0%

JSON
Related for UB:CVE-2012-0056
nessus12openvas54myhack582prion1oraclelinux2redhat3seebug4veracode1chrome1exploitpack2securityvulns3ubuntu3android1canvas1thn1centos1cve1cert1exploitdb2fedora23kitploit1