Published: 17/05/2012 Updated: 12/10/2023

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

VMScore: 642

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

The cap_bprm_set_creds function in security/commoncap.c in the Linux kernel prior to 3.3.3 does not properly handle the use of file system capabilities (aka fcaps) for implementing a privileged executable file, which allows local users to bypass intended personality restrictions via a crafted application, as demonstrated by an attack that uses a parent process to disable ASLR.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel

Synopsis Important: kernel-rt security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel-rt packages that fix two security issues and various bugsare now available for Red Hat Enterprise MRG 21The Red Hat Security Response Team has rated this update as havingimportant secu ...

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix multiple security issues and several bugsare now available for Red Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as havingimportant secur ...

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2011-4086 Eric Sandeen reported an issue in the journaling layer for ext4 filesystems (jbd2) Local users can cause buffers to ...

Several security issues were fixed in the kernel ...

CWE-264 https://bugzilla.redhat.com/show_bug.cgi?id=806722 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.3 https://github.com/torvalds/linux/commit/d52fc5dde171f030170a6cb78034d166b13c9445 http://www.openwall.com/lists/oss-security/2012/04/20/6 http://www.securityfocus.com/bid/53166 http://www.securitytracker.com/id?1027072 http://rhn.redhat.com/errata/RHSA-2012-0743.html https://exchange.xforce.ibmcloud.com/vulnerabilities/75043 http://www.debian.org/security/2012/dsa-2469 http://rhn.redhat.com/errata/RHSA-2012-0670.html http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d52fc5dde171f030170a6cb78034d166b13c9445 https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2012:0670 https://usn.ubuntu.com/1460-1/https://www.debian.org/security/./dsa-2469

CVE-2012-2123

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect