CVE-2012-2313

2012-05-1400:00:00

ubuntu.com

1.2 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:N/I:N/A:P

0.0005 Low

EPSS

Percentile

14.6%

JSON

The rio_ioctl function in drivers/net/ethernet/dlink/dl2k.c in the Linux
kernel before 3.3.7 does not restrict access to the SIOCSMIIREG command,
which allows local users to write data to an Ethernet adapter via an ioctl
call.

Bugs

Notes

Author	Note
jdstrand	linux-armadaxp is maintained by OEM
jj	Do more research on whether the phyaddress stuff could be exploited beyond denial of service

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchlinux< 2.6.24-31.102UNKNOWN
ubuntu10.04noarchlinux< 2.6.32-41.91UNKNOWN
ubuntu11.04noarchlinux< 2.6.38-15.61UNKNOWN
ubuntu11.10noarchlinux< 3.0.0-21.35UNKNOWN
ubuntu12.04noarchlinux< 3.2.0-25.40UNKNOWN
ubuntu12.04noarchlinux-armadaxp< 3.2.0-1605.8UNKNOWN
ubuntu10.04noarchlinux-ec2< 2.6.32-345.50UNKNOWN
ubuntu10.04noarchlinux-lts-backport-natty< 2.6.38-15.61~lucid1UNKNOWN
ubuntu10.04noarchlinux-lts-backport-oneiric< 3.0.0-21.35~lucid1UNKNOWN
ubuntu11.04noarchlinux-ti-omap4< 2.6.38-1209.25UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	8.04	noarch	linux	< 2.6.24-31.102	UNKNOWN
ubuntu	10.04	noarch	linux	< 2.6.32-41.91	UNKNOWN
ubuntu	11.04	noarch	linux	< 2.6.38-15.61	UNKNOWN
ubuntu	11.10	noarch	linux	< 3.0.0-21.35	UNKNOWN
ubuntu	12.04	noarch	linux	< 3.2.0-25.40	UNKNOWN
ubuntu	12.04	noarch	linux-armadaxp	< 3.2.0-1605.8	UNKNOWN
ubuntu	10.04	noarch	linux-ec2	< 2.6.32-345.50	UNKNOWN
ubuntu	10.04	noarch	linux-lts-backport-natty	< 2.6.38-15.61~lucid1	UNKNOWN
ubuntu	10.04	noarch	linux-lts-backport-oneiric	< 3.0.0-21.35~lucid1	UNKNOWN
ubuntu	11.04	noarch	linux-ti-omap4	< 2.6.38-1209.25	UNKNOWN