Lucene search

K
cvelistRedhatCVELIST:CVE-2012-2136
HistoryAug 09, 2012 - 10:00 a.m.

CVE-2012-2136

2012-08-0910:00:00
redhat
www.cve.org
7

AI Score

7.7

Confidence

High

EPSS

0

Percentile

5.1%

The sock_alloc_send_pskb function in net/core/sock.c in the Linux kernel before 3.4.5 does not properly validate a certain length value, which allows local users to cause a denial of service (heap-based buffer overflow and system crash) or possibly gain privileges by leveraging access to a TUN/TAP device.