CVE-2012-2192 in AIX

Summary

The socketpair function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.1.4-FP-25 SP-02 allows local users to cause a denial of service (system crash) via a crafted application that leverages the presence of a socket on the free list.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 04/04/2012
• Disclosure: 06/20/2012
• Moderation: VulDB entry created
• Entries: VDB-5488 (1)
• CPE: ready
• CWE: CWE-399 (Confirmed)
• CVSS: 6.2
• EPSS: 0.00059
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-2192
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-2192
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-2192/