CVE-2012-2136 in Kernel
Summary
The sock_alloc_send_pskb function in net/core/sock.c in the Linux kernel before 3.4.5 does not properly validate a certain length value, which allows local users to cause a denial of service (heap-based buffer overflow and system crash) or possibly gain privileges by leveraging access to a TUN/TAP device.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
04/04/2012
Disclosure
08/09/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 5478 | Linux Kernel sock_alloc_send_pskb input validation | 20 | Not defined | Official fix | CVE-2012-2136 |