CVE-2012-2313
low
CVSS v3
—
CVSS v2
1.2
VIR risk
1.2
Description
The rio_ioctl function in drivers/net/ethernet/dlink/dl2k.c in the Linux kernel before 3.3.7 does not restrict access to the SIOCSMIIREG command, which allows local users to write data to an Ethernet adapter via an ioctl call.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2012-2313
Vendor advisory: secalert@redhat.com — https://github.com/torvalds/linux/commit/1bb57e940e1958e40d51f2078f50c3a96a9b2d75
Vendor advisory: secalert@redhat.com — http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.7
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| debian | bookworm | fixed | 3.2.19-1 |
| debian | bullseye | fixed | 3.2.19-1 |
| debian | forky | fixed | 3.2.19-1 |
| debian | sid | fixed | 3.2.19-1 |
| debian | trixie | fixed | 3.2.19-1 |
| linux-kernel | affected | | |
| linux-kernel | 3.3 | affected | |
| linux-kernel | 3.3.1 | affected | |
| linux-kernel | 3.3.2 | affected | |
| linux-kernel | 3.3.3 | affected | |
| linux-kernel | 3.3.4 | affected | |
| linux-kernel | 3.3.5 | affected | |
| suse | 10.0 | affected | |
| rhel | 5 | affected | |
| rhel | 5.0 | affected | |
| rhel | 5.6.z | affected | |
References
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1bb57e940e1958e40d51f2078f50c3a96a9b2d75
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
- http://marc.info/?l=bugtraq&m=139447903326211&w=2
- http://rhn.redhat.com/errata/RHSA-2012-1174.html
- http://rhn.redhat.com/errata/RHSA-2012-1481.html
- http://rhn.redhat.com/errata/RHSA-2012-1541.html
- http://rhn.redhat.com/errata/RHSA-2012-1589.html
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.7
- http://www.openwall.com/lists/oss-security/2012/05/04/8
- http://www.securityfocus.com/bid/53965
- https://bugzilla.redhat.com/show_bug.cgi?id=818820
- https://github.com/torvalds/linux/commit/1bb57e940e1958e40d51f2078f50c3a96a9b2d75
- https://security-tracker.debian.org/tracker/CVE-2012-2313
CWEs
CWE-264
Verify integrity in audit chain (admin only). AS-IS.