Back to search
CVE-2012-6704
Published: Dec 28, 2016
Modified: Aug 6, 2024
PUBLISHED
Description
The sock_setsockopt function in net/core/sock.c in the Linux kernel before 3.5 mishandles negative values of sk_sndbuf and sk_rcvbuf, which allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact by leveraging the CAP_NET_ADMIN capability for a crafted setsockopt system call with the (1) SO_SNDBUF or (2) SO_RCVBUF option.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
95135
vdb-entry
x_refsource_BID
https://bugzilla.redhat.com/show_bug.cgi?id=1402024
x_refsource_CONFIRM
[oss-security] 20161202 Re: CVE Request: Linux: signed overflows for SO_{SND|RCV}BUFFORCE
mailing-list
x_refsource_MLIST
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now