Linux Kernel up to 3.5.x ipvs Subsystem ip_vs_ctl.c getsockopt IP_VS_SO_GET_TIMEOUT information disclosure

Summaryinfo

A vulnerability identified as problematic has been detected in Linux Kernel up to 3.5.x. This affects the function getsockopt of the file net/netfilter/ipvs/ip_vs_ctl.c of the component ipvs Subsystem. This manipulation of the argument IP_VS_SO_GET_TIMEOUT causes information disclosure. This vulnerability appears as CVE-2012-6138. There is no available exploit. Applying a patch is the recommended action to fix this issue.

Detailsinfo

A vulnerability has been found in Linux Kernel up to 3.5.x (Operating System) and classified as problematic. Affected by this vulnerability is the function getsockopt of the file net/netfilter/ipvs/ip_vs_ctl.c of the component ipvs Subsystem. The manipulation of the argument IP_VS_SO_GET_TIMEOUT with an unknown input leads to a information disclosure vulnerability. The CWE definition for the vulnerability is CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. As an impact it is known to affect confidentiality. The summary by CVE is:

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-6536, CVE-2012-6537, CVE-2012-6538, CVE-2012-6539, CVE-2012-6540, CVE-2012-6541, CVE-2012-6542, CVE-2012-6543, CVE-2012-6544, CVE-2012-6545, CVE-2012-6546, CVE-2012-6547, CVE-2012-6548, CVE-2012-6549. Reason: This candidate is a duplicate of CVE-2012-6536, CVE-2012-6537, CVE-2012-6538, CVE-2012-6539, CVE-2012-6540, CVE-2012-6541, CVE-2012-6542, CVE-2012-6543, CVE-2012-6544, CVE-2012-6545, CVE-2012-6546, CVE-2012-6547, CVE-2012-6548, and CVE-2012-6549. Notes: All CVE users should reference one or more of CVE-2012-6536, CVE-2012-6537, CVE-2012-6538, CVE-2012-6539, CVE-2012-6540, CVE-2012-6541, CVE-2012-6542, CVE-2012-6543, CVE-2012-6544, CVE-2012-6545, CVE-2012-6546, CVE-2012-6547, CVE-2012-6548, and CVE-2012-6549 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

The weakness was presented 03/05/2013 by Mathias Krause as CVE Requests (maybe): Linux kernel: various info leaks, some NULL ptr derefs as not defined mailinglist post (oss-sec). The advisory is shared at seclists.org. The public release happened without involvement of Linux. This vulnerability is known as CVE-2012-6138 since 12/06/2012. The exploitation appears to be easy. An attack has to be approached locally. A single authentication is required for exploitation. Technical details are known, but no exploit is available. MITRE ATT&CK project uses the attack technique T1592 for this issue.

Applying a patch is able to eliminate this problem. The bugfix is ready for download at github.com. A possible mitigation has been published before and not just after the disclosure of the vulnerability.

The vulnerability is also documented in the databases at OSVDB (90970†) and Secunia (SA53411†). Additional details are provided at seclists.org. See VDB-7907, VDB-7908, VDB-7909 and VDB-7910 for similar entries. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Operating System

Vendor

• Linux

Name

• Kernel

Version

• 3.0
• 3.1
• 3.2
• 3.3
• 3.4
• 3.5

License

• open-source

Website

• Vendor: https://www.kernel.org/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion