QwikSec

Security Database

CVE

CWE

Training

CVE-2012-0056

Published: Jan 27, 2012

Modified: Aug 6, 2024

PUBLISHED

Description

The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when writing to /proc/<pid>/mem, which allows local users to gain privileges by modifying process memory, as demonstrated by Mempodipper.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vdb-entry

x_refsource_BID

http://blog.zx2c4.com/749

x_refsource_MISC

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=e268337dfe26dfc7efd422a804dbb27977a3cccc

x_refsource_CONFIRM

vendor-advisory

x_refsource_UBUNTU

vendor-advisory

x_refsource_REDHAT

third-party-advisory

x_refsource_SECUNIA

[oss-security] 20120119 Re: CVE request: kernel: proc: clean up and fix /proc/<pid>/mem handling

mailing-list

x_refsource_MLIST

[oss-security] 20120117 Re: CVE request: kernel: proc: clean up and fix /proc/<pid>/mem handling

mailing-list

x_refsource_MLIST

vendor-advisory

x_refsource_REDHAT

[oss-security] 20120118 CVE request: kernel: proc: clean up and fix /proc/<pid>/mem handling

mailing-list

x_refsource_MLIST

[oss-security] 20120122 Re: CVE request: kernel: proc: clean up and fix /proc/<pid>/mem handling

mailing-list

x_refsource_MLIST

https://bugzilla.redhat.com/show_bug.cgi?id=782642

x_refsource_CONFIRM

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.2

x_refsource_CONFIRM

third-party-advisory

x_refsource_CERT-VN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.