Lucene search
HistoryOct 03, 2012 - 11:02 a.m.
CVE-2012-3510
CVSS2
5.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:P/I:N/A:C
AI Score
5.7
Confidence
Low
EPSS
0
Percentile
5.1%
Use-after-free vulnerability in the xacct_add_tsk function in kernel/tsacct.c in the Linux kernel before 2.6.19 allows local users to obtain potentially sensitive information from kernel memory or cause a denial of service (system crash) via a taskstats TASKSTATS_CMD_ATTR_PID command.
Affected configurations
Node
linuxlinux_kernelRange≤2.6.18.8
ORlinuxlinux_kernelMatch2.6.10
ORlinuxlinux_kernelMatch2.6.10rc1
ORlinuxlinux_kernelMatch2.6.10rc2
ORlinuxlinux_kernelMatch2.6.10rc3
ORlinuxlinux_kernelMatch2.6.11
ORlinuxlinux_kernelMatch2.6.11rc1
ORlinuxlinux_kernelMatch2.6.11rc2
ORlinuxlinux_kernelMatch2.6.11rc3
ORlinuxlinux_kernelMatch2.6.11rc4
ORlinuxlinux_kernelMatch2.6.11rc5
ORlinuxlinux_kernelMatch2.6.11.1
ORlinuxlinux_kernelMatch2.6.11.2
ORlinuxlinux_kernelMatch2.6.11.3
ORlinuxlinux_kernelMatch2.6.11.4
ORlinuxlinux_kernelMatch2.6.11.5
ORlinuxlinux_kernelMatch2.6.11.6
ORlinuxlinux_kernelMatch2.6.11.7
ORlinuxlinux_kernelMatch2.6.11.8
ORlinuxlinux_kernelMatch2.6.11.9
ORlinuxlinux_kernelMatch2.6.11.10
ORlinuxlinux_kernelMatch2.6.11.11
ORlinuxlinux_kernelMatch2.6.11.12
ORlinuxlinux_kernelMatch2.6.12
ORlinuxlinux_kernelMatch2.6.12rc1
ORlinuxlinux_kernelMatch2.6.12rc2
ORlinuxlinux_kernelMatch2.6.12rc3
ORlinuxlinux_kernelMatch2.6.12rc4
ORlinuxlinux_kernelMatch2.6.12rc5
ORlinuxlinux_kernelMatch2.6.12rc6
ORlinuxlinux_kernelMatch2.6.12.1
ORlinuxlinux_kernelMatch2.6.12.2
ORlinuxlinux_kernelMatch2.6.12.3
ORlinuxlinux_kernelMatch2.6.12.4
ORlinuxlinux_kernelMatch2.6.12.5
ORlinuxlinux_kernelMatch2.6.12.6
ORlinuxlinux_kernelMatch2.6.13
ORlinuxlinux_kernelMatch2.6.13rc1
ORlinuxlinux_kernelMatch2.6.13rc2
ORlinuxlinux_kernelMatch2.6.13rc3
ORlinuxlinux_kernelMatch2.6.13rc4
ORlinuxlinux_kernelMatch2.6.13rc5
ORlinuxlinux_kernelMatch2.6.13rc6
ORlinuxlinux_kernelMatch2.6.13rc7
ORlinuxlinux_kernelMatch2.6.13.1
ORlinuxlinux_kernelMatch2.6.13.2
ORlinuxlinux_kernelMatch2.6.13.3
ORlinuxlinux_kernelMatch2.6.13.4
ORlinuxlinux_kernelMatch2.6.13.5
ORlinuxlinux_kernelMatch2.6.14
ORlinuxlinux_kernelMatch2.6.14rc1
ORlinuxlinux_kernelMatch2.6.14rc2
ORlinuxlinux_kernelMatch2.6.14rc3
ORlinuxlinux_kernelMatch2.6.14rc4
ORlinuxlinux_kernelMatch2.6.14rc5
ORlinuxlinux_kernelMatch2.6.14.1
ORlinuxlinux_kernelMatch2.6.14.2
ORlinuxlinux_kernelMatch2.6.14.3
ORlinuxlinux_kernelMatch2.6.14.4
ORlinuxlinux_kernelMatch2.6.14.5
ORlinuxlinux_kernelMatch2.6.14.6
ORlinuxlinux_kernelMatch2.6.14.7
ORlinuxlinux_kernelMatch2.6.15
ORlinuxlinux_kernelMatch2.6.15rc1
ORlinuxlinux_kernelMatch2.6.15rc2
ORlinuxlinux_kernelMatch2.6.15rc3
ORlinuxlinux_kernelMatch2.6.15rc4
ORlinuxlinux_kernelMatch2.6.15rc5
ORlinuxlinux_kernelMatch2.6.15rc6
ORlinuxlinux_kernelMatch2.6.15rc7
ORlinuxlinux_kernelMatch2.6.15.1
ORlinuxlinux_kernelMatch2.6.15.2
ORlinuxlinux_kernelMatch2.6.15.3
ORlinuxlinux_kernelMatch2.6.15.4
ORlinuxlinux_kernelMatch2.6.15.5
ORlinuxlinux_kernelMatch2.6.15.6
ORlinuxlinux_kernelMatch2.6.15.7
ORlinuxlinux_kernelMatch2.6.15.8
ORlinuxlinux_kernelMatch2.6.15.9
ORlinuxlinux_kernelMatch2.6.15.10
ORlinuxlinux_kernelMatch2.6.15.11
ORlinuxlinux_kernelMatch2.6.16
ORlinuxlinux_kernelMatch2.6.16rc1
ORlinuxlinux_kernelMatch2.6.16rc2
ORlinuxlinux_kernelMatch2.6.16rc3
ORlinuxlinux_kernelMatch2.6.16rc4
ORlinuxlinux_kernelMatch2.6.16rc5
ORlinuxlinux_kernelMatch2.6.16rc6
ORlinuxlinux_kernelMatch2.6.16rc7
ORlinuxlinux_kernelMatch2.6.16.1
ORlinuxlinux_kernelMatch2.6.16.2
ORlinuxlinux_kernelMatch2.6.16.3
ORlinuxlinux_kernelMatch2.6.16.4
ORlinuxlinux_kernelMatch2.6.16.5
ORlinuxlinux_kernelMatch2.6.16.6
ORlinuxlinux_kernelMatch2.6.16.7
ORlinuxlinux_kernelMatch2.6.16.8
ORlinuxlinux_kernelMatch2.6.16.9
ORlinuxlinux_kernelMatch2.6.16.10
ORlinuxlinux_kernelMatch2.6.16.11
ORlinuxlinux_kernelMatch2.6.16.12
ORlinuxlinux_kernelMatch2.6.16.13
ORlinuxlinux_kernelMatch2.6.16.14
ORlinuxlinux_kernelMatch2.6.16.15
ORlinuxlinux_kernelMatch2.6.16.16
ORlinuxlinux_kernelMatch2.6.16.17
ORlinuxlinux_kernelMatch2.6.16.18
ORlinuxlinux_kernelMatch2.6.16.19
ORlinuxlinux_kernelMatch2.6.16.20
ORlinuxlinux_kernelMatch2.6.16.21
ORlinuxlinux_kernelMatch2.6.16.22
ORlinuxlinux_kernelMatch2.6.16.23
ORlinuxlinux_kernelMatch2.6.16.24
ORlinuxlinux_kernelMatch2.6.16.25
ORlinuxlinux_kernelMatch2.6.16.26
ORlinuxlinux_kernelMatch2.6.16.27
ORlinuxlinux_kernelMatch2.6.16.28
ORlinuxlinux_kernelMatch2.6.16.29
ORlinuxlinux_kernelMatch2.6.16.30
ORlinuxlinux_kernelMatch2.6.16.31
ORlinuxlinux_kernelMatch2.6.16.32
ORlinuxlinux_kernelMatch2.6.16.33
ORlinuxlinux_kernelMatch2.6.16.34
ORlinuxlinux_kernelMatch2.6.16.35
ORlinuxlinux_kernelMatch2.6.16.36
ORlinuxlinux_kernelMatch2.6.16.37
ORlinuxlinux_kernelMatch2.6.16.38
ORlinuxlinux_kernelMatch2.6.16.39
ORlinuxlinux_kernelMatch2.6.16.40
ORlinuxlinux_kernelMatch2.6.16.41
ORlinuxlinux_kernelMatch2.6.16.42
ORlinuxlinux_kernelMatch2.6.16.43
ORlinuxlinux_kernelMatch2.6.16.44
ORlinuxlinux_kernelMatch2.6.16.45
ORlinuxlinux_kernelMatch2.6.16.46
ORlinuxlinux_kernelMatch2.6.16.47
ORlinuxlinux_kernelMatch2.6.16.48
ORlinuxlinux_kernelMatch2.6.16.49
ORlinuxlinux_kernelMatch2.6.16.50
ORlinuxlinux_kernelMatch2.6.16.51
ORlinuxlinux_kernelMatch2.6.16.52
ORlinuxlinux_kernelMatch2.6.16.53
ORlinuxlinux_kernelMatch2.6.16.54
ORlinuxlinux_kernelMatch2.6.16.55
ORlinuxlinux_kernelMatch2.6.16.56
ORlinuxlinux_kernelMatch2.6.16.57
ORlinuxlinux_kernelMatch2.6.16.58
ORlinuxlinux_kernelMatch2.6.16.59
ORlinuxlinux_kernelMatch2.6.16.60
ORlinuxlinux_kernelMatch2.6.16.61
ORlinuxlinux_kernelMatch2.6.16.62
ORlinuxlinux_kernelMatch2.6.17
ORlinuxlinux_kernelMatch2.6.17rc1
ORlinuxlinux_kernelMatch2.6.17rc2
ORlinuxlinux_kernelMatch2.6.17rc3
ORlinuxlinux_kernelMatch2.6.17rc4
ORlinuxlinux_kernelMatch2.6.17rc5
ORlinuxlinux_kernelMatch2.6.17rc6
ORlinuxlinux_kernelMatch2.6.17.1
ORlinuxlinux_kernelMatch2.6.17.2
ORlinuxlinux_kernelMatch2.6.17.3
ORlinuxlinux_kernelMatch2.6.17.4
ORlinuxlinux_kernelMatch2.6.17.5
ORlinuxlinux_kernelMatch2.6.17.6
ORlinuxlinux_kernelMatch2.6.17.7
ORlinuxlinux_kernelMatch2.6.17.8
ORlinuxlinux_kernelMatch2.6.17.9
ORlinuxlinux_kernelMatch2.6.17.10
ORlinuxlinux_kernelMatch2.6.17.11
ORlinuxlinux_kernelMatch2.6.17.12
ORlinuxlinux_kernelMatch2.6.17.13
ORlinuxlinux_kernelMatch2.6.17.14
ORlinuxlinux_kernelMatch2.6.18
ORlinuxlinux_kernelMatch2.6.18rc1
ORlinuxlinux_kernelMatch2.6.18rc2
ORlinuxlinux_kernelMatch2.6.18rc3
ORlinuxlinux_kernelMatch2.6.18rc4
ORlinuxlinux_kernelMatch2.6.18rc5
ORlinuxlinux_kernelMatch2.6.18rc6
ORlinuxlinux_kernelMatch2.6.18rc7
ORlinuxlinux_kernelMatch2.6.18.1
ORlinuxlinux_kernelMatch2.6.18.2
ORlinuxlinux_kernelMatch2.6.18.3
ORlinuxlinux_kernelMatch2.6.18.4
ORlinuxlinux_kernelMatch2.6.18.5
ORlinuxlinux_kernelMatch2.6.18.6
ORlinuxlinux_kernelMatch2.6.18.7
References
ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.19
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f0ec1aaf54caddd21c259aea8b2ecfbde4ee4fb9
rhn.redhat.com/errata/RHSA-2012-1323.html
secunia.com/advisories/50811
www.openwall.com/lists/oss-security/2012/08/20/12
www.securityfocus.com/bid/55144
www.securitytracker.com/id?1027602
bugzilla.redhat.com/show_bug.cgi?id=849722
github.com/torvalds/linux/commit/f0ec1aaf54caddd21c259aea8b2ecfbde4ee4fb9
Related
ubuntucve
ubuntucve
CVE-2012-3510
2012-10-03 00:00:00
seebug
seebug
Linux kernel 2.6.18 'taskstats'本地拒绝服务漏洞
2012-08-26 00:00:00
prion
prion
Design/Logic Flaw
2012-10-03 11:02:00
debiancve
debiancve
CVE-2012-3510
2012-10-03 11:02:56
cve
cve
CVE-2012-3510
2012-10-03 11:02:56
cvelist
cvelist
CVE-2012-3510
2012-10-03 10:00:00
nessus
nessus
Oracle Linux 5 : kernel (ELSA-2012-1323-1)
2013-07-12 00:00:00
Scientific Linux Security Update : kernel on SL5.x i386/x86_64 (20121002)
2012-10-04 00:00:00
CentOS 5 : kernel (CESA-2012:1323)
2012-10-05 00:00:00
oraclelinux
oraclelinux
1
2012-10-02 00:00:00
kernel security and bug fix update
2012-10-02 00:00:00
openvas
openvas
Oracle: Security Advisory (ELSA-2012-1323-1)
2015-10-06 00:00:00
Oracle: Security Advisory (ELSA-2012-1323)
2015-10-06 00:00:00
CentOS Update for kernel CESA-2012:1323 centos5
2012-10-05 00:00:00
redhat
redhat
(RHSA-2012:1323) Important: kernel security and bug fix update
2012-10-02 00:00:00
(RHSA-2012:1324) Important: rhev-hypervisor5 security and bug fix update
2012-10-02 00:00:00
centos
centos
kernel security update
2012-10-03 11:39:10
suse
suse
Security update for Linux kernel (important)
2012-10-24 09:08:54
CVSS2
5.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:P/I:N/A:C
AI Score
5.7
Confidence
Low
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2012-3510