CVE-2012-3520
First published: Tue Aug 21 2012(Updated: )
A flaw was found in the way Netlink messages without explicitly set SCM_CREDENTIALS were delivered. The kernel passes all-zero SCM_CREDENTIALS ancillary data to the receiver if the sender did not provide such data, instead of including the correct data from the peer (as it is the case with AF_UNIX). Programs that set SO_PASSCRED option on the Netlink socket and rely on SCM_CREDENTIALS for authentication might accept spoofed messages and perform privileged actions on behalf of the unprivileged attacker. Introduced in: <a href="http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=16e57262">http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=16e57262</a> Acknowledgements: Red Hat would like to thank Pablo Neira Ayuso for reporting this issue.
Credit: secalert@redhat.com secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Linux kernel | <=3.2.29 | |
| Linux Linux kernel | =2.3.2 | |
| Linux Linux kernel | =2.3.20 | |
| Linux Linux kernel | =2.3.21 | |
| Linux Linux kernel | =2.3.22 | |
| Linux Linux kernel | =2.3.23 | |
| Linux Linux kernel | =2.3.24 | |
| Linux Linux kernel | =2.3.25 | |
| Linux Linux kernel | =2.3.26 | |
| Linux Linux kernel | =2.3.27 | |
| Linux Linux kernel | =2.3.28 | |
| Linux Linux kernel | =2.3.29 | |
| Linux Linux kernel | =2.4.33.2 | |
| Linux Linux kernel | =2.6.13.2 | |
| Linux Linux kernel | =2.6.23.2 | |
| Linux Linux kernel | =2.6.33.2 | |
| Linux Linux kernel | =2.6.33.20 | |
| Linux Linux kernel | =3.2 | |
| Linux Linux kernel | =3.2-rc2 | |
| Linux Linux kernel | =3.2-rc3 | |
| Linux Linux kernel | =3.2-rc4 | |
| Linux Linux kernel | =3.2-rc5 | |
| Linux Linux kernel | =3.2-rc6 | |
| Linux Linux kernel | =3.2-rc7 | |
| Linux Linux kernel | =3.2.1 | |
| Linux Linux kernel | =3.2.2 | |
| Linux Linux kernel | =3.2.3 | |
| Linux Linux kernel | =3.2.4 | |
| Linux Linux kernel | =3.2.5 | |
| Linux Linux kernel | =3.2.6 | |
| Linux Linux kernel | =3.2.7 | |
| Linux Linux kernel | =3.2.8 | |
| Linux Linux kernel | =3.2.9 | |
| Linux Linux kernel | =3.2.10 | |
| Linux Linux kernel | =3.2.11 | |
| Linux Linux kernel | =3.2.12 | |
| Linux Linux kernel | =3.2.13 | |
| Linux Linux kernel | =3.2.14 | |
| Linux Linux kernel | =3.2.15 | |
| Linux Linux kernel | =3.2.16 | |
| Linux Linux kernel | =3.2.17 | |
| Linux Linux kernel | =3.2.18 | |
| Linux Linux kernel | =3.2.19 | |
| Linux Linux kernel | =3.2.20 | |
| Linux Linux kernel | =3.2.21 | |
| Linux Linux kernel | =3.2.22 | |
| Linux Linux kernel | =3.2.23 | |
| Linux Linux kernel | =3.2.24 | |
| Linux Linux kernel | =3.2.25 | |
| Linux Linux kernel | =3.2.26 | |
| Linux Linux kernel | =3.2.27 | |
| Linux Linux kernel | =3.2.28 | |
| Linux Linux kernel | =3.3.2 | |
| debian/linux | 5.10.223-1 5.10.226-1 6.1.115-1 6.1.112-1 6.11.5-1 6.11.7-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e0e3cea46d31d23dc40df0a49a7a2c04fe8edfea
- http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00005.html
- http://lists.opensuse.org/opensuse-updates/2013-02/msg00018.html
- http://secunia.com/advisories/50848
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.30
- http://www.openwall.com/lists/oss-security/2012/08/22/1
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/55152
- http://www.ubuntu.com/usn/USN-1599-1
- http://www.ubuntu.com/usn/USN-1610-1
- https://bugzilla.redhat.com/show_bug.cgi?id=850449
- https://github.com/torvalds/linux/commit/e0e3cea46d31d23dc40df0a49a7a2c04fe8edfea
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=16e57262
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux.git;a=commit;h=e0e3cea46d31d23dc40df0a49a7a2c04fe8edfea
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=850688
- https://rhn.redhat.com/errata/RHSA-2012-1491.html
- https://launchpad.net/bugs/cve/CVE-2012-3520
- https://security-tracker.debian.org/tracker/CVE-2012-3520
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3520
- https://nvd.nist.gov/vuln/detail/CVE-2012-3520
- https://ubuntu.com/security/CVE-2012-3520
- collector/nvd-index
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2012-3520
- collector/launchpad-cve
- source/Launchpad
- agent/author
- agent/severity
- agent/remedy
- agent/weakness
- agent/description
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup
- agent/event
- agent/references
- agent/tags
- collector/security-tracker-debian
- source/Debian
- agent/softwarecombine
- collector/usn-cve
- source/Ubuntu
- vendor/linux
- canonical/linux linux kernel
- version/linux linux kernel/3.2.29
- version/linux linux kernel/2.3.2
- version/linux linux kernel/2.3.20
- version/linux linux kernel/2.3.21
- version/linux linux kernel/2.3.22
- version/linux linux kernel/2.3.23
- version/linux linux kernel/2.3.24
- version/linux linux kernel/2.3.25
- version/linux linux kernel/2.3.26
- version/linux linux kernel/2.3.27
- version/linux linux kernel/2.3.28
- version/linux linux kernel/2.3.29
- version/linux linux kernel/2.4.33.2
- version/linux linux kernel/2.6.13.2
- version/linux linux kernel/2.6.23.2
- version/linux linux kernel/2.6.33.2
- version/linux linux kernel/2.6.33.20
- version/linux linux kernel/3.2
- version/linux linux kernel/3.2-rc2
- version/linux linux kernel/3.2-rc3
- version/linux linux kernel/3.2-rc4
- version/linux linux kernel/3.2-rc5
- version/linux linux kernel/3.2-rc6
- version/linux linux kernel/3.2-rc7
- version/linux linux kernel/3.2.1
- version/linux linux kernel/3.2.2
- version/linux linux kernel/3.2.3
- version/linux linux kernel/3.2.4
- version/linux linux kernel/3.2.5
- version/linux linux kernel/3.2.6
- version/linux linux kernel/3.2.7
- version/linux linux kernel/3.2.8
- version/linux linux kernel/3.2.9
- version/linux linux kernel/3.2.10
- version/linux linux kernel/3.2.11
- version/linux linux kernel/3.2.12
- version/linux linux kernel/3.2.13
- version/linux linux kernel/3.2.14
- version/linux linux kernel/3.2.15
- version/linux linux kernel/3.2.16
- version/linux linux kernel/3.2.17
- version/linux linux kernel/3.2.18
- version/linux linux kernel/3.2.19
- version/linux linux kernel/3.2.20
- version/linux linux kernel/3.2.21
- version/linux linux kernel/3.2.22
- version/linux linux kernel/3.2.23
- version/linux linux kernel/3.2.24
- version/linux linux kernel/3.2.25
- version/linux linux kernel/3.2.26
- version/linux linux kernel/3.2.27
- version/linux linux kernel/3.2.28
- version/linux linux kernel/3.3.2
- package-manager/debian