CVE-2012-3412

HIGH

Description

The sfc (aka Solarflare Solarstorm) driver in the Linux kernel before 3.2.30 allows remote attackers to cause a denial of service (DMA descriptor consumption and network-controller outage) via crafted TCP packets that trigger a small MSS value.

References

http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00005.html

http://rhn.redhat.com/errata/RHSA-2012-1323.html

http://rhn.redhat.com/errata/RHSA-2012-1324.html

http://rhn.redhat.com/errata/RHSA-2012-1347.html

http://rhn.redhat.com/errata/RHSA-2012-1375.html

http://rhn.redhat.com/errata/RHSA-2012-1401.html

http://rhn.redhat.com/errata/RHSA-2012-1430.html

http://secunia.com/advisories/50633

http://secunia.com/advisories/50732

http://secunia.com/advisories/50811

http://secunia.com/advisories/51193

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.30

http://www.openwall.com/lists/oss-security/2012/08/03/4

http://www.ubuntu.com/usn/USN-1567-1

http://www.ubuntu.com/usn/USN-1568-1

http://www.ubuntu.com/usn/USN-1572-1

http://www.ubuntu.com/usn/USN-1575-1

http://www.ubuntu.com/usn/USN-1577-1

http://www.ubuntu.com/usn/USN-1578-1

http://www.ubuntu.com/usn/USN-1579-1

http://www.ubuntu.com/usn/USN-1580-1

https://bugzilla.redhat.com/show_bug.cgi?id=844714

https://github.com/torvalds/linux/commit/68cb695ccecf949d48949e72f8ce591fdaaa325c

https://www.suse.com/support/update/announcement/2012/suse-su-20121679-1.html

Details

Source: MITRE

Published: 2012-10-03

Updated: 2013-08-17

Type: CWE-189

Risk Information

CVSS v2.0

Base Score: 7.8

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

Impact Score: 6.9

Exploitability Score: 10

Severity: HIGH

Vulnerable Software

Configuration 1

OR

cpe:2.3:o:linux:linux_kernel:3.2:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:3.2.1:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:3.2.3:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:3.2.4:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:3.2.5:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:3.2.6:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:3.2.7:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:3.2.8:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:3.2.9:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:3.2.10:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:3.2.11:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:3.2.12:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:3.2.13:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:3.2.14:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:3.2.15:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:3.2.16:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:3.2.17:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:3.2.18:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:3.2.19:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:3.2.20:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:3.2.21:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:3.2.22:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:3.2.23:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:3.2.24:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:3.2.25:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:3.2.26:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:3.2.27:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:3.2.28:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to 3.2.29 (inclusive)

Tenable Plugins

View all (35 total)

IDNameProductFamilySeverity
125250SUSE SLES11 Security Update : kernel (SUSE-SU-2019:14051-1) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)NessusSuSE Local Security Checks
high
83611SUSE SLES11 Security Update : kernel (SUSE-SU-2014:0287-1)NessusSuSE Local Security Checks
high
78938RHEL 6 : rhev-hypervisor6 (RHSA-2012:1375)NessusRed Hat Local Security Checks
high
78934RHEL 5 : rhev-hypervisor5 (RHSA-2012:1324)NessusRed Hat Local Security Checks
high
74914openSUSE Security Update : kernel (openSUSE-SU-2013:0396-1)NessusSuSE Local Security Checks
high
74778openSUSE Security Update : kernel (openSUSE-SU-2012:1330-1)NessusSuSE Local Security Checks
high
68847Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2013-2507)NessusOracle Linux Local Security Checks
high
68686Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2041)NessusOracle Linux Local Security Checks
high
68685Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2040)NessusOracle Linux Local Security Checks
high
68684Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2039)NessusOracle Linux Local Security Checks
high
68683Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2038)NessusOracle Linux Local Security Checks
high
68643Oracle Linux 6 : kernel (ELSA-2012-1366)NessusOracle Linux Local Security Checks
high
68632Oracle Linux 5 : kernel (ELSA-2012-1323)NessusOracle Linux Local Security Checks
high
68631Oracle Linux 5 : kernel (ELSA-2012-1323-1)NessusOracle Linux Local Security Checks
high
64180SuSE 11.2 Security Update : Linux kernel (SAT Patch Numbers 7123 / 7127)NessusSuSE Local Security Checks
high
64061RHEL 6 : kernel (RHSA-2012:1430)NessusRed Hat Local Security Checks
high
64059RHEL 6 : kernel (RHSA-2012:1401)NessusRed Hat Local Security Checks
high
64057RHEL 5 : kernel (RHSA-2012:1347)NessusRed Hat Local Security Checks
high
62616Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20121016)NessusScientific Linux Local Security Checks
high
62596CentOS 6 : kernel (CESA-2012:1366)NessusCentOS Local Security Checks
high
62572RHEL 6 : kernel (RHSA-2012:1366)NessusRed Hat Local Security Checks
high
62431CentOS 5 : kernel (CESA-2012:1323)NessusCentOS Local Security Checks
high
62428Scientific Linux Security Update : kernel on SL5.x i386/x86_64 (20121002)NessusScientific Linux Local Security Checks
high
62405RHEL 5 : kernel (RHSA-2012:1323)NessusRed Hat Local Security Checks
high
62241USN-1580-1 : linux-ti-omap4 vulnerabilitiesNessusUbuntu Local Security Checks
high
62240Ubuntu 12.04 LTS : linux vulnerabilities (USN-1579-1)NessusUbuntu Local Security Checks
high
62239USN-1578-1 : linux-ti-omap4 vulnerabilitiesNessusUbuntu Local Security Checks
high
62238USN-1577-1 : linux-ti-omap4 vulnerabilitiesNessusUbuntu Local Security Checks
high
62212Ubuntu 10.04 LTS : linux-lts-backport-oneiric vulnerabilities (USN-1575-1)NessusUbuntu Local Security Checks
high
62211Ubuntu 10.04 LTS : linux-lts-backport-natty vulnerabilities (USN-1574-1)NessusUbuntu Local Security Checks
high
62200Ubuntu 10.04 LTS : linux-ec2 vulnerabilities (USN-1573-1)NessusUbuntu Local Security Checks
high
62199Ubuntu 10.04 LTS : linux vulnerabilities (USN-1572-1)NessusUbuntu Local Security Checks
high
62112Ubuntu 11.10 : linux vulnerabilities (USN-1568-1)NessusUbuntu Local Security Checks
high
62111Ubuntu 11.04 : linux vulnerabilities (USN-1567-1)NessusUbuntu Local Security Checks
high
801527CentOS RHSA-2012-1323 Security CheckLog Correlation EngineGeneric
high