low2.1Public exploit code
CVE-2012-4530
The load_script function in fs/binfmt_script.c in the Linux kernel before 3.7.2 does not properly handle recursion, which allows local users to obtain sensitiv…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Linux Kernel (Ubuntu 11.10/12.04) - binfmt_script Stack Data Disclosure2014-01-14 · dos · linux
Impact
The load_script function in fs/binfmt_script.c in the Linux kernel before 3.7.2 does not properly handle recursion, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linux | Linux Kernel | through 3.7.1 Versions 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b66c5984017533316fd1951770302649baf1aa33
- http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00018.html
- http://rhn.redhat.com/errata/RHSA-2013-0223.html
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.2
- http://www.openwall.com/lists/oss-security/2012/10/19/3
- https://bugzilla.redhat.com/show_bug.cgi?id=868285
- https://github.com/torvalds/linux/commit/b66c5984017533316fd1951770302649baf1aa33
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b66c5984017533316fd1951770302649baf1aa33
- http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00018.html
- http://rhn.redhat.com/errata/RHSA-2013-0223.html
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.2
- http://www.openwall.com/lists/oss-security/2012/10/19/3
- https://bugzilla.redhat.com/show_bug.cgi?id=868285
- https://github.com/torvalds/linux/commit/b66c5984017533316fd1951770302649baf1aa33