CVE-2012-2744
high
CVSS v3
—
CVSS v2
7.8
VIR risk
7.8
Description
net/ipv6/netfilter/nf_conntrack_reasm.c in the Linux kernel before 2.6.34, when the nf_conntrack_ipv6 module is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via certain types of fragmented IPv6 packets.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2012-2744
Vendor advisory: secalert@redhat.com — https://github.com/torvalds/linux/commit/9e2dcf72023d1447f09c47d77c99b0c49659e5ce
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| linux-kernel | affected | | |
| linux-kernel | 2.6.33 | affected | |
| linux-kernel | 2.6.33.1 | affected | |
| linux-kernel | 2.6.33.2 | affected | |
| linux-kernel | 2.6.33.3 | affected | |
| linux-kernel | 2.6.33.4 | affected | |
| linux-kernel | 2.6.33.5 | affected | |
| linux-kernel | 2.6.33.6 | affected | |
| linux-kernel | 2.6.33.7 | affected | |
| linux-kernel | 2.6.33.8 | affected | |
| linux-kernel | 2.6.33.9 | affected | |
| linux-kernel | 2.6.33.10 | affected | |
| linux-kernel | 2.6.33.11 | affected | |
| linux-kernel | 2.6.33.12 | affected | |
| linux-kernel | 2.6.33.13 | affected | |
| linux-kernel | 2.6.33.14 | affected | |
| linux-kernel | 2.6.33.15 | affected | |
| linux-kernel | 2.6.33.16 | affected | |
| linux-kernel | 2.6.33.17 | affected | |
| linux-kernel | 2.6.33.18 | affected | |
| linux-kernel | 2.6.33.19 | affected | |
| debian | bookworm | fixed | 2.6.34-1 |
| debian | bullseye | fixed | 2.6.34-1 |
| debian | forky | fixed | 2.6.34-1 |
| debian | sid | fixed | 2.6.34-1 |
| debian | trixie | fixed | 2.6.34-1 |
References
- http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9e2dcf72023d1447f09c47d77c99b0c49659e5ce
- http://rhn.redhat.com/errata/RHSA-2012-1064.html
- http://rhn.redhat.com/errata/RHSA-2012-1148.html
- http://secunia.com/advisories/49928
- http://www.securityfocus.com/bid/54367
- http://www.securitytracker.com/id?1027235
- https://bugzilla.redhat.com/show_bug.cgi?id=833402
- https://github.com/torvalds/linux/commit/9e2dcf72023d1447f09c47d77c99b0c49659e5ce
- https://security-tracker.debian.org/tracker/CVE-2012-2744
Verify integrity in audit chain (admin only). AS-IS.