CVE-2012-6136: Medium severity redhat Tuned vulnerability
tuned 2.10.0 creates its PID file with insecure permissions which allows local users to kill arbitrary processes.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2012-6136?
CVE-2012-6136 refers to a vulnerability in tuned 2.10.0 that creates its PID file with insecure permissions, allowing local users to kill arbitrary processes.
How severe is the vulnerability CVE-2012-6136?
The severity of CVE-2012-6136 is medium, with a severity value of 5.5.
Which software versions are affected by CVE-2012-6136?
CVE-2012-6136 affects tuned versions 2.10.0-1, 2.15.0-1, and 2.20.0-1 on Debian and Red Hat based systems.
How can this vulnerability be fixed?
To fix CVE-2012-6136, update tuned to a version that includes the fix. This may involve upgrading to a newer package version or applying a patch provided by the vendor.
Where can I find more information about CVE-2012-6136?
You can find more information about CVE-2012-6136 on the Red Hat Bugzilla page (https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-6136) and the Debian Security Tracker (https://security-tracker.debian.org/tracker/CVE-2012-6136).