CVE-2012-2127

2012-06-2123:55:02

CWE-119

redhat

web.nvd.nist.gov

linux

kernel

cve-2012-2127

procfs

denial of service

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.3

Confidence

Low

EPSS

0.044

Percentile

92.5%

JSON

fs/proc/root.c in the procfs implementation in the Linux kernel before 3.2 does not properly interact with CLONE_NEWPID clone system calls, which allows remote attackers to cause a denial of service (reference leak and memory consumption) by making many connections to a daemon that uses PID namespaces to isolate clients, as demonstrated by vsftpd.

Affected configurations

Nvd

Node

linuxlinux_kernelRange≤3.1.10

linuxlinux_kernelMatch3.1.1

linuxlinux_kernelMatch3.1.2

linuxlinux_kernelMatch3.1.3

linuxlinux_kernelMatch3.1.4

linuxlinux_kernelMatch3.1.5

linuxlinux_kernelMatch3.1.6

linuxlinux_kernelMatch3.1.7

linuxlinux_kernelMatch3.1.8

linuxlinux_kernelMatch3.1.9

VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel3.1.1cpe:2.3:o:linux:linux_kernel:3.1.1:*:*:*:*:*:*:*
linuxlinux_kernel3.1.2cpe:2.3:o:linux:linux_kernel:3.1.2:*:*:*:*:*:*:*
linuxlinux_kernel3.1.3cpe:2.3:o:linux:linux_kernel:3.1.3:*:*:*:*:*:*:*
linuxlinux_kernel3.1.4cpe:2.3:o:linux:linux_kernel:3.1.4:*:*:*:*:*:*:*
linuxlinux_kernel3.1.5cpe:2.3:o:linux:linux_kernel:3.1.5:*:*:*:*:*:*:*
linuxlinux_kernel3.1.6cpe:2.3:o:linux:linux_kernel:3.1.6:*:*:*:*:*:*:*
linuxlinux_kernel3.1.7cpe:2.3:o:linux:linux_kernel:3.1.7:*:*:*:*:*:*:*
linuxlinux_kernel3.1.8cpe:2.3:o:linux:linux_kernel:3.1.8:*:*:*:*:*:*:*
linuxlinux_kernel3.1.9cpe:2.3:o:linux:linux_kernel:3.1.9:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
linux	linux_kernel	3.1.1	cpe:2.3:o:linux:linux_kernel:3.1.1:::::::*
linux	linux_kernel	3.1.2	cpe:2.3:o:linux:linux_kernel:3.1.2:::::::*
linux	linux_kernel	3.1.3	cpe:2.3:o:linux:linux_kernel:3.1.3:::::::*
linux	linux_kernel	3.1.4	cpe:2.3:o:linux:linux_kernel:3.1.4:::::::*
linux	linux_kernel	3.1.5	cpe:2.3:o:linux:linux_kernel:3.1.5:::::::*
linux	linux_kernel	3.1.6	cpe:2.3:o:linux:linux_kernel:3.1.6:::::::*
linux	linux_kernel	3.1.7	cpe:2.3:o:linux:linux_kernel:3.1.7:::::::*
linux	linux_kernel	3.1.8	cpe:2.3:o:linux:linux_kernel:3.1.8:::::::*
linux	linux_kernel	3.1.9	cpe:2.3:o:linux:linux_kernel:3.1.9:::::::*