CVE-2012-0207: Divide by Zero
Commit 5b7c84066733c5dfb0e4016d939757b38de189e4 ('ipv4: correct IGMP behavior on v3 query during v2-compatibility mode') added yet another case for query parsing, which can result in maxdelay = 0. Substitute a value of 1, as in the usual v3 case.
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=654876
code added in 2.6.36-rc8.
Upstream commit: http://git.kernel.org/linus/a8c1f65c79cbbb2f7da782d4c9d15639a9b94b27
Acknowledgements:
Red Hat would like to thank Simon McVittie for reporting this issue.
Other sources
The igmpheardquery function in net/ipv4/igmp.c in the Linux kernel before 3.2.1 allows remote attackers to cause a denial of service (divide-by-zero error and panic) via IGMP packets.
— Launchpad
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0207?
CVE-2012-0207 has a medium severity level classified due to potential impacts on networking functionality.
How do I fix CVE-2012-0207?
To fix CVE-2012-0207, update to a version of the Linux kernel that is patched for this vulnerability.
What systems are affected by CVE-2012-0207?
CVE-2012-0207 affects certain versions of the Linux kernel and Red Hat Enterprise Linux EUS 5.6.
What are the implications of CVE-2012-0207?
The implications of CVE-2012-0207 involve potential disruption in Internet Group Management Protocol (IGMP) query handling.
Is there a public exploit available for CVE-2012-0207?
As of now, there have been no public exploits reported for CVE-2012-0207.