Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

CVE-2012-2319 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceCVE-2012-2319

CVE-2012-2319

UNKNOWN

Multiple buffer overflows in the hfsplus filesystem implementation in the Linux kernel before 3

Published May 17, 2012

Modified 1 years ago

Details

Multiple buffer overflows in the hfsplus filesystem implementation in the Linux kernel before 3.3.5 allow local users to gain privileges via a crafted HFS plus filesystem, a related issue to CVE-2009-4020.

References

WEB

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6f24f892871acc47b40dd594c63606a17c714f77

ADVISORY

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html

ADVISORY

http://rhn.redhat.com/errata/RHSA-2012-1323.html

ADVISORY

http://rhn.redhat.com/errata/RHSA-2012-1347.html

ADVISORY

http://secunia.com/advisories/50811

WEB

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.5

WEB

http://www.openwall.com/lists/oss-security/2012/05/07/11

WEB

https://bugzilla.redhat.com/show_bug.cgi?id=819471

WEB

https://github.com/torvalds/linux/commit/6f24f892871acc47b40dd594c63606a17c714f77

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2012-2319

CVSS Analysis

CVSS v2.0

7.2

Exploitability

Access Vector

LocalAV:L

Access Complexity

LowAC:L

Authentication

NoneAu:N

Impact

Confidentiality

CompleteC:C

Integrity

CompleteI:C

Availability

CompleteA:C

7.2/AV:L/AC:L/Au:N/C:C/I:C/A:C

Ecosystems

Timeline

PublishedMay 17, 2012

ModifiedAug 6, 2024