The cipso_v4_validate function in net/ipv4/cipso_ipv4.c in the Linux kernel before 3.4.8 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via an IPOPT_CIPSO IP_OPTIONS setsockopt system call.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade python-perfUpgrade kernel-headersUpgrade kernel-docUpgrade kernel-develUpgrade kernel-debugUpgrade kernelUpgrade perfUpgrade kernel-debug-develUpgrade kernel-firmware | Dec 1, 2016 | Feb 21, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 22, 2013 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Feb 22, 2013 |
| Suse | — | Upgrade ext4dev-kmp-xenUpgrade btrfs-kmp-paeUpgrade kernel-xen-baseUpgrade kernel-xen-develUpgrade kernel-trace-baseUpgrade xen-kmp-defaultUpgrade kernel-ec2-baseUpgrade kernel-traceUpgrade kernel-symsUpgrade kernel-sourceUpgrade xen-kmp-traceUpgrade kernel-default-baseUpgrade btrfs-kmp-defaultUpgrade hyper-v-kmp-traceUpgrade kernel-pae-develUpgrade ext4dev-kmp-traceUpgrade kernel-paeUpgrade kernel-default-manUpgrade ext4dev-kmp-defaultUpgrade btrfs-kmp-xenUpgrade kernel-trace-develUpgrade hyper-v-kmp-defaultUpgrade kernel-defaultUpgrade hyper-v-kmp-paeUpgrade xen-kmp-paeUpgrade kernel-xenUpgrade kernel-ec2Upgrade kernel-default-develUpgrade ext4dev-kmp-paeUpgrade kernel-ec2-develUpgrade kernel-pae-base | Jan 12, 2015 | Feb 21, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-45-sparc64-smpUpgrade linux-image-3.0.0-1215-omap4Upgrade linux-image-3.0.0-25-genericUpgrade linux-image-3.0.0-25-omapUpgrade linux-image-2.6.32-45-ia64Upgrade linux-image-3.2.0-31-highbankUpgrade linux-image-2.6.32-45-virtualUpgrade linux-image-2.6.32-45-powerpcUpgrade linux-image-2.6.32-45-sparc64Upgrade linux-image-3.0.0-25-powerpcUpgrade linux-image-3.2.0-31-genericUpgrade linux-image-3.2.0-1419-omap4Upgrade linux-image-2.6.32-45-genericUpgrade linux-image-2.6.32-45-386Upgrade linux-image-2.6.32-45-serverUpgrade linux-image-2.6.32-45-preemptUpgrade linux-image-2.6.32-45-versatileUpgrade linux-image-2.6.32-45-powerpc64-smpUpgrade linux-image-3.2.0-31-powerpc-smpUpgrade linux-image-3.0.0-25-virtualUpgrade linux-image-3.2.0-31-omapUpgrade linux-image-2.6.32-350-ec2Upgrade linux-image-2.6.32-45-lpiaUpgrade linux-image-2.6.32-45-powerpc-smpUpgrade linux-image-3.2.0-31-generic-paeUpgrade linux-image-3.2.0-31-powerpc64-smpUpgrade linux-image-3.0.0-25-powerpc64-smpUpgrade linux-image-3.0.0-25-powerpc-smpUpgrade linux-image-3.2.0-31-virtualUpgrade linux-image-3.0.0-25-serverUpgrade linux-image-2.6.32-45-generic-paeUpgrade linux-image-3.0.0-25-generic-pae | Nov 8, 2024 | Feb 22, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub