4.9

CVE-2012-6657

Exploit

The sock_setsockopt function in net/core/sock.c in the Linux kernel before 3.5.7 does not ensure that a keepalive action is associated with a stream socket, which allows local users to cause a denial of service (system crash) by leveraging the ability to create a raw socket.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version <= 3.5.6
Linux ≫ Linux Kernel Version3.5.1
Linux ≫ Linux Kernel Version3.5.2
Linux ≫ Linux Kernel Version3.5.3
Linux ≫ Linux Kernel Version3.5.4
Linux ≫ Linux Kernel Version3.5.5
Novell ≫ Suse Linux Enterprise Server Version10.0 Updatesp4 SwEditionltss
Novell ≫ Suse Linux Enterprise Server Version11.0 Updatesp1 SwEditionltss
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.12% 0.281
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.9 3.9 6.9
AV:L/AC:L/Au:N/C:N/I:N/A:C