Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-3520
HistoryOct 03, 2012 - 12:00 a.m.

CVE-2012-3520

2012-10-0300:00:00
ubuntu.com
ubuntu.com
18

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:N/I:P/A:N

EPSS

0

Percentile

5.1%

The Netlink implementation in the Linux kernel before 3.2.30 does not
properly handle messages that lack SCM_CREDENTIALS data, which might allow
local users to spoof Netlink communication via a crafted message, as
demonstrated by a message to (1) Avahi or (2) NetworkManager.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchlinux<Β 3.2.0-32.51UNKNOWN
ubuntu12.04noarchlinux-armadaxp<Β 3.2.0-1609.14UNKNOWN
ubuntu12.04noarchlinux-ti-omap4<Β 3.2.0-1420.27UNKNOWN

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:N/I:P/A:N

EPSS

0

Percentile

5.1%