Summaryinfo

A vulnerability described as problematic has been identified in Linux Kernel up to 3.6 RC5. The affected element is the function snd_compr_allocate_buffer of the file sound/core/compress_offload.c of the component ALSA Subsystem. The manipulation results in integer overflow. This vulnerability is known as CVE-2012-6703. Attacking locally is a requirement. No exploit is available. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability classified as critical has been found in Linux Kernel up to 3.6 RC5 (Operating System). Affected is the function snd_compr_allocate_buffer of the file sound/core/compress_offload.c of the component ALSA Subsystem. The manipulation with an unknown input leads to a integer overflow vulnerability. CWE is classifying the issue as CWE-190. The product performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

Integer overflow in the snd_compr_allocate_buffer function in sound/core/compress_offload.c in the ALSA subsystem in the Linux kernel before 3.6-rc6-next-20120917 allows local users to cause a denial of service (insufficient memory allocation) or possibly have unspecified other impact via a crafted SNDRV_COMPRESS_SET_PARAMS ioctl call.

The weakness was published 06/29/2016 (Website). The advisory is shared for download at git.kernel.org. This vulnerability is traded as CVE-2012-6703 since 06/28/2016. The exploitability is told to be easy. The attack needs to be approached locally. The requirement for exploitation is a authentication. There are known technical details, but no exploit is available.

Upgrading to version 3.6-rc6-next-20120917 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at SecurityFocus (BID 91502†). Similar entries are available at VDB-88383, VDB-88379, VDB-88378 and VDB-88377. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Operating System

Vendor

• Linux

Name

• Kernel

Version

• 3.6 RC5

License

• open-source

Website

• Vendor: https://www.kernel.org/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion