CVE-2012-2192

Published: Jun 20, 2012Modified: Apr 29, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

The socketpair function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.1.4-FP-25 SP-02 allows local users to cause a denial of service (system crash) via a crafted application that leverages the presence of a socket on the free list.

Affected (4)

Products: Ibm: Aix, Vios

Ibm

2 products

Aix

Vios

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Aix	Version 5.3
Ibm Aix	Version 6.1
Ibm Aix	Version 7.1

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Ibm Vios	Version 2.2.1.4 fp-25_sp-02

Related CWEs

CWE-399

References (18)

http://aix.software.ibm.com/aix/efixes/security/socket_advisory.asc

Source: psirt@us.ibm.com

Vendor Advisory

http://www.ibm.com/support/docview.wss?uid=isg1IV16603

Source: psirt@us.ibm.com

http://www.ibm.com/support/docview.wss?uid=isg1IV19178

Source: psirt@us.ibm.com

http://www.ibm.com/support/docview.wss?uid=isg1IV21128

Source: psirt@us.ibm.com

http://www.ibm.com/support/docview.wss?uid=isg1IV21131

Source: psirt@us.ibm.com

http://www.ibm.com/support/docview.wss?uid=isg1IV21235

Source: psirt@us.ibm.com

http://www.securityfocus.com/bid/53567

Source: psirt@us.ibm.com

http://www.securitytracker.com/id?1027126

Source: psirt@us.ibm.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/76032

Source: psirt@us.ibm.com

http://aix.software.ibm.com/aix/efixes/security/socket_advisory.asc