The main function in tools/hv/hv_kvp_daemon.c in hypervkvpd, as distributed in the Linux kernel before 3.8-rc1, allows local users to cause a denial of service (daemon exit) via a crafted application that sends a Netlink message. NOTE: this vulnerability exists because of an incorrect fix for CVE-2012-2669.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade hypervkvpd | Dec 1, 2016 | Dec 27, 2012 |
| Oracle_linux | — | Upgrade hypervkvpd | Oct 16, 2024 | Dec 27, 2012 |
| Suse | — | Upgrade hyper-v | Dec 12, 2013 | Jul 9, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-36-omapUpgrade linux-image-3.0.0-31-genericUpgrade linux-image-3.2.0-36-genericUpgrade linux-image-3.2.0-36-powerpc-smpUpgrade linux-image-3.2.0-1424-omap4Upgrade linux-image-3.0.0-31-virtualUpgrade linux-image-3.0.0-31-powerpcUpgrade linux-image-3.5.0-22-genericUpgrade linux-image-3.5.0-22-powerpc-smpUpgrade linux-image-3.0.0-31-omapUpgrade linux-image-3.2.0-36-generic-paeUpgrade linux-image-3.0.0-31-serverUpgrade linux-image-3.5.0-22-highbankUpgrade linux-image-3.5.0-217-omap4Upgrade linux-image-3.2.0-36-virtualUpgrade linux-image-3.0.0-1221-omap4Upgrade linux-image-3.2.0-36-highbankUpgrade linux-image-3.5.0-22-omapUpgrade linux-image-3.0.0-31-powerpc-smpUpgrade linux-image-3.2.0-36-powerpc64-smpUpgrade linux-image-3.5.0-22-powerpc64-smpUpgrade linux-image-3.0.0-31-generic-paeUpgrade linux-image-3.0.0-31-powerpc64-smp | Nov 8, 2024 | Dec 27, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub