Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2012-0056
HistoryJan 19, 2012 - 12:00 a.m.

CVE-2012-0056

2012-01-1900:00:00
ubuntu.com
ubuntu.com
17

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.001

Percentile

46.9%

JSON

The mem_write function in the Linux kernel before 3.2.2, when ASLR is
disabled, does not properly check permissions when writing to
/proc/<pid>/mem, which allows local users to gain privileges by modifying
process memory, as demonstrated by Mempodipper.

Bugs

Notes

Author Note
mdeslaur RH says introduced by 198214a7ee, needs checking.
apw as the proposed fix actually changes behaviour significantly and the functionality is very new and thus less likely to be needed it has been decided to revert 198214a for oneiric (the only release affected) and monitor it in precise for release.
OSVersionArchitecturePackageVersionFilename
ubuntu11.10noarchlinux<Β 3.0.0-15.26UNKNOWN
ubuntu10.04noarchlinux-lts-backport-oneiric<Β 3.0.0-15.26~lucid1UNKNOWN
ubuntu11.10noarchlinux-ti-omap4<Β 3.0.0-1207.16UNKNOWN

Related

seebug 4
securityvulns 3
exploitpack 2
ubuntu 3
exploitdb 2
zdt 2
nessus 14
oraclelinux 2
prion 1
myhack58 2
openvas 54
redhat 3
veracode 1
chrome 1
android 1
canvas 1
centos 1
thn 1
nvd 1
cve 1
cvelist 1
cert 1
fedora 23
kitploit 1
osv 1
seebug
seebug
Linux Local Root =&gt; 2.6.39 (32-bit &amp; 64-bit) - Mempodipper #2
2014-11-13 00:00:00
Linux Local Root => 2.6.39 (32-bit & 64-bit) - Mempodipper
2014-07-01 00:00:00
Mempodipper - Linux Local Root for &gt;=2.6.39, 32-bit and 64-bit
2012-01-23 00:00:00
securityvulns
securityvulns
Linux privilege escalation
2012-02-08 00:00:00
[USN-1364-1] Linux kernel &#40;OMAP4&#41; vulnerabilities
2012-02-15 00:00:00
Linux kernel multiple security vulnerabilities
2012-02-15 00:00:00
exploitpack
exploitpack
Linux Kernel 2.6.39 3.2.2 (Gentoo Ubuntu x86x64) - Mempodipper Local Privilege Escalation (1)
2012-01-23 00:00:00
Linux Kernel 2.6.39 3.2.2 (x86x64) - Mempodipper Local Privilege Escalation (2)
2012-01-12 00:00:00
ubuntu
ubuntu
Linux kernel (Oneiric backport) vulnerability
2012-01-26 00:00:00
Linux kernel (OMAP4) vulnerabilities
2012-02-13 00:00:00
Linux kernel vulnerability
2012-01-23 00:00:00
exploitdb
exploitdb
Linux Kernel 2.6.39 &lt; 3.2.2 (x86/x64) - &#039;Mempodipper&#039; Local Privilege Escalation (2)
2012-01-12 00:00:00
Linux Kernel 2.6.39 &lt; 3.2.2 (Gentoo / Ubuntu x86/x64) - &#039;Mempodipper&#039; Local Privilege Escalation (1)
2012-01-23 00:00:00
zdt
zdt
Linux Kernel 2.6.18-374 Local root Exploit
2012-06-29 00:00:00
Mempodipper - Linux Local Root for >=2.6.39, 32-bit and 64-bit
2012-01-23 00:00:00
nessus
nessus
Oracle Linux 6 : kernel (ELSA-2012-0052)
2013-07-12 00:00:00
Ubuntu 10.04 LTS : linux-lts-backport-oneiric vulnerability (USN-1342-1)
2012-01-26 00:00:00
Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20120123)
2012-08-01 00:00:00
oraclelinux
oraclelinux
kernel security and bug fix update
2012-01-23 00:00:00
Unbreakable Enterprise kernel security and bug fix update
2012-01-24 00:00:00
prion
prion
Input validation
2012-01-27 15:55:00
myhack58
myhack58
Linux 2.6.39 to 3.2.0 explosion mention the right vulnerability-vulnerability warning-the black bar safety net
2012-03-08 00:00:00
Linux kernels >=2.6.39 local root exploit 0day-vulnerability warning-the black bar safety net
2012-01-25 00:00:00
openvas
openvas
RedHat Update for kernel RHSA-2012:0052-01
2012-07-09 00:00:00
CentOS Update for kernel CESA-2012:0052 centos6
2012-07-30 00:00:00
Ubuntu: Security Advisory (USN-1342-1)
2012-02-01 00:00:00
redhat
redhat
(RHSA-2012:0061) Important: kernel-rt security update
2012-01-24 00:00:00
(RHSA-2012:0052) Important: kernel security and bug fix update
2012-01-23 00:00:00
(RHSA-2012:0109) Important: rhev-hypervisor6 security and bug fix update
2012-02-15 00:00:00
veracode
veracode
Privilege Escalation
2020-04-10 01:06:51
chrome
chrome
Stable Channel Update for Chromebooks
2012-02-16 00:00:00
android
android
mempodroid - mempodripper - mem exploit
2012-01-24 00:00:00
canvas
canvas
Immunity Canvas: CVE_2012_0056
2012-01-27 15:55:00
centos
centos
kernel, perf, python security update
2012-01-24 20:01:50
thn
thn
CVE-2012-0056 Linux privilege escalation [Video Demonstration]
2012-01-28 19:55:00
nvd
nvd
CVE-2012-0056
2012-01-27 15:55:04
cve
cve
CVE-2012-0056
2012-01-27 15:55:04
cvelist
cvelist
CVE-2012-0056
2012-01-27 15:00:00
cert
cert
Linux Kernel local privilege escalation via SUID /proc/pid/mem write
2012-01-27 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: kernel-3.2.1-3.fc16
2012-01-24 07:57:29
[SECURITY] Fedora 16 Update: kernel-3.2.5-3.fc16
2012-02-10 22:00:18
[SECURITY] Fedora 16 Update: kernel-3.2.9-1.fc16
2012-03-06 19:30:15
kitploit
kitploit
[Linux Exploit Suggester] Grab the Linux Operating Systems release version, and return a suggestive list of possible exploits
2013-08-29 00:48:00
osv
osv
kernel-debug-4.8.13-1.1 on GA media
2024-06-15 00:00:00

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.001

Percentile

46.9%

JSON
Related for UB:CVE-2012-0056
seebug4securityvulns3exploitpack2ubuntu3exploitdb2zdt2nessus14oraclelinux2prion1myhack582openvas54redhat3veracode1chrome1android1canvas1centos1thn1nvd1cve1cvelist1cert1fedora23kitploit1osv1