5.5

CVE-2012-1090

The cifs_lookup function in fs/cifs/dir.c in the Linux kernel before 3.2.10 allows local users to cause a denial of service (OOPS) via attempted access to a special file, as demonstrated by a FIFO.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 3.2.10
Redhat ≫ Enterprise Mrg Version 2.0
Suse ≫ Linux Enterprise Desktop Version 11 Update sp1
Suse ≫ Linux Enterprise Desktop Version 11 Update sp2
Suse ≫ Linux Enterprise Server Version 11 Update sp1
Suse ≫ Linux Enterprise Server Version 11 Update sp1 SwPlatform vmware
Suse ≫ Linux Enterprise Server Version 11 Update sp2 SwPlatform vmware
Suse ≫ Linux Enterprise Server Version 11 Update sp2 SwEdition -
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.4% 0.316
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NIST 4.9 3.9 6.9
AV:L/AC:L/Au:N/C:N/I:N/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html
Third Party Advisory
Mailing List
http://secunia.com/advisories/48964
Broken Link
http://rhn.redhat.com/errata/RHSA-2012-0531.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-0481.html
Third Party Advisory
http://secunia.com/advisories/48842
Broken Link
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.10
Patch
Vendor Advisory
Mailing List
http://www.openwall.com/lists/oss-security/2012/02/28/4
Patch
Third Party Advisory
Mailing List
https://bugzilla.redhat.com/show_bug.cgi?id=798293
Patch
Third Party Advisory
Issue Tracking
https://github.com/torvalds/linux/commit/88d7d4e4a439f32acc56a6d860e415ee71d3df08
Patch
Third Party Advisory