CVE-2012-2127

Published: Jun 21, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

fs/proc/root.c in the procfs implementation in the Linux kernel before 3.2 does not properly interact with CLONE_NEWPID clone system calls, which allows remote attackers to cause a denial of service (reference leak and memory consumption) by making many connections to a daemon that uses PID namespaces to isolate clients, as demonstrated by vsftpd.

Affected (10)

Products: Linux: Linux Kernel

1 product

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 3.1.10
Linux Linux Kernel	Version 3.1.1
Linux Linux Kernel	Version 3.1.2
Linux Linux Kernel	Version 3.1.3
Linux Linux Kernel	Version 3.1.4
Linux Linux Kernel	Version 3.1.5
Linux Linux Kernel	Version 3.1.6
Linux Linux Kernel	Version 3.1.7
Linux Linux Kernel	Version 3.1.8
Linux Linux Kernel	Version 3.1.9

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (22)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=905ad269c55fc62bee3da29f7b1d1efeba8aa1e1

Source: secalert@redhat.com

http://ubuntu.com/usn/usn-1607-1

Source: secalert@redhat.com

http://www.kernel.org/pub/linux/kernel/v3.x/

Source: secalert@redhat.com

http://www.kernel.org/pub/linux/kernel/v3.x/patch-3.2.bz2

Source: secalert@redhat.com

Patch

http://www.openwall.com/lists/oss-security/2012/04/20/25

Source: secalert@redhat.com

Exploit

http://www.openwall.com/lists/oss-security/2012/04/22/1

Source: secalert@redhat.com

http://www.securityfocus.com/bid/55774

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1594-1

Source: secalert@redhat.com

https://bugzilla.novell.com/show_bug.cgi?id=757783

Source: secalert@redhat.com

Exploit

https://bugzilla.redhat.com/show_bug.cgi?id=815188

Source: secalert@redhat.com

Exploit

https://github.com/torvalds/linux/commit/905ad269c55fc62bee3da29f7b1d1efeba8aa1e1

Source: secalert@redhat.com

ExploitPatch

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=905ad269c55fc62bee3da29f7b1d1efeba8aa1e1

Source: af854a3a-2127-422b-91ae-364da2661108

http://ubuntu.com/usn/usn-1607-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kernel.org/pub/linux/kernel/v3.x/

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kernel.org/pub/linux/kernel/v3.x/patch-3.2.bz2

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.openwall.com/lists/oss-security/2012/04/20/25

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.openwall.com/lists/oss-security/2012/04/22/1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/55774

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1594-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.novell.com/show_bug.cgi?id=757783

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://bugzilla.redhat.com/show_bug.cgi?id=815188

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://github.com/torvalds/linux/commit/905ad269c55fc62bee3da29f7b1d1efeba8aa1e1

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

Timeline

No history available yet.