VulnerabilityModified
CVE-2012-2119
Buffer overflow in the macvtap device driver in the Linux kernel before 3.4.5, when running in certain configurations, allows privileged KVM guest users to cause a denial of service (crash) via a long descriptor with a long vector length.
MEDIUM 5.2EPSS 0.71%
Does this matter?
Lower severity and a low EPSS score (0.71%). Track it; it rarely justifies an emergency change on its own.
Description
Buffer overflow in the macvtap device driver in the Linux kernel before 3.4.5, when running in certain configurations, allows privileged KVM guest users to cause a denial of service (crash) via a long descriptor with a long vector length.
- CVSS 2.0
- 5.2 MEDIUMAV:A/AC:M/Au:S/C:N/I:N/A:C
- EPSS
- 0.71% probability · 52th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- linux/linux kernel
- Source
- secalert@redhat.com
References
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=814278
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b92946e2919134ebe2a4083e4302236295ea2a73
- http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html
- http://marc.info/?l=linux-netdev&m=133455718001608&w=2
- http://rhn.redhat.com/errata/RHSA-2012-0743.html
- http://ubuntu.com/usn/usn-1529-1
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.5
- http://www.openwall.com/lists/oss-security/2012/04/19/14
- https://github.com/torvalds/linux/commit/b92946e2919134ebe2a4083e4302236295ea2a73
- https://oss.oracle.com/git/?p=redpatch.git%3Ba=commit%3Bh=4aae94d1c7b32316911c86176c0ed4f8ed62da73
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=814278
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b92946e2919134ebe2a4083e4302236295ea2a73
- http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html
- http://marc.info/?l=linux-netdev&m=133455718001608&w=2
- http://rhn.redhat.com/errata/RHSA-2012-0743.html
- http://ubuntu.com/usn/usn-1529-1
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.5
- http://www.openwall.com/lists/oss-security/2012/04/19/14
- https://github.com/torvalds/linux/commit/b92946e2919134ebe2a4083e4302236295ea2a73
- https://oss.oracle.com/git/?p=redpatch.git%3Ba=commit%3Bh=4aae94d1c7b32316911c86176c0ed4f8ed62da73
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.