CVE-2012-2372

Advisory lineage Upstream: 0 Downstream: 4
Modified
Published: 22 Jan 2013, 23:00
Last modified:06 Aug 2024, 19:34

Vulnerability Summary

Overall Risk (default)
low
18/100
CVSS Score
4.4 MEDIUM
v2.0 (nvd)
EPSS Score
0.12% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

22 Jan 2013, 23:00
Published
Vulnerability first disclosed
06 Aug 2024, 19:34
Last Modified
Vulnerability information updated

Description

The rds_ib_xmit function in net/rds/ib_send.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel 3.7.4 and earlier allows local users to cause a denial of service (BUG_ON and kernel panic) by establishing an RDS connection with the source IP address equal to the IPoIB interface's own IP address, as demonstrated by rds-ping.

CVSS Metrics

  • v2.0•MEDIUM•Score: 4.4AV:L/AC:M/Au:S/C:N/I:N/A:C

EPSS Trends

Current EPSS score: 0.12%• Percentile: 30%

Affected Systems

  • linux•linux_kernel

    ≤ 3.7.4 | 3.7 | 3.7.1 | 3.7.2 | 3.7.3

References (10)