CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
Confidence
High
EPSS
Percentile
26.7%
A flaw was found in the Linux kernel’s KVM (Kernel Virtual Machine) virtual
cpu setup. An unprivileged local user could exploit this flaw to crash the
system leading to a denial of service. (CVE-2012-1601)
Steve Grubb reported a flaw with Linux fscaps (file system base
capabilities) when used to increase the permissions of a process. For
application on which fscaps are in use a local attacker can disable address
space randomization to make attacking the process with raised privileges
easier. (CVE-2012-2123)
A flaw was found in how the Linux kernel passed the replacement session
keyring to a child process. An unprivileged local user could exploit this
flaw to cause a denial of service (panic). (CVE-2012-2745)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 11.10 | noarch | linux-image-3.0.0-20-generic-pae | < 3.0.0-20.34 | UNKNOWN |
Ubuntu | 11.10 | noarch | block-modules-3.0.0-20-generic-di | < 3.0.0-20.34 | UNKNOWN |
Ubuntu | 11.10 | noarch | block-modules-3.0.0-20-virtual-di | < 3.0.0-20.34 | UNKNOWN |
Ubuntu | 11.10 | noarch | crypto-modules-3.0.0-20-generic-di | < 3.0.0-20.34 | UNKNOWN |
Ubuntu | 11.10 | noarch | crypto-modules-3.0.0-20-virtual-di | < 3.0.0-20.34 | UNKNOWN |
Ubuntu | 11.10 | noarch | fat-modules-3.0.0-20-generic-di | < 3.0.0-20.34 | UNKNOWN |
Ubuntu | 11.10 | noarch | fat-modules-3.0.0-20-virtual-di | < 3.0.0-20.34 | UNKNOWN |
Ubuntu | 11.10 | noarch | fb-modules-3.0.0-20-generic-di | < 3.0.0-20.34 | UNKNOWN |
Ubuntu | 11.10 | noarch | fb-modules-3.0.0-20-virtual-di | < 3.0.0-20.34 | UNKNOWN |
Ubuntu | 11.10 | noarch | firewire-core-modules-3.0.0-20-generic-di | < 3.0.0-20.34 | UNKNOWN |