Vulnerability CVE-2012-2383

Vulnerability Name:

CVE-2012-2383 (CCN-76279)

Assigned:

2012-04-23

Published:

2012-04-23

Updated:

2023-02-13

Summary:

Integer overflow in the i915_gem_execbuffer2 function in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 3.3.5 on 32-bit platforms allows local users to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted ioctl call.

CVSS v3 Severity:

4.0 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Low

CVSS v2 Severity:

4.9 Medium (CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C)
3.7 Low (Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Complete

2.1 Low (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P)
1.6 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

4.9 Medium (REDHAT CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C)
3.7 Low (REDHAT Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Complete

Vulnerability Type:

CWE-190

Vulnerability Consequences:

Denial of Service

References:

Source: MITRE
Type: CNA
CVE-2012-2383

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: CCN
Type: Linux Kernel GIT Repository
drm/i915: fix integer overflow in i915_gem_execbuffer2()

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: CCN
Type: RHSA-2012-1156
Moderate: kernel security and bug fix update

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: CCN
Type: OSVDB ID: 83074
Linux Kernel on 32-bit i915 Graphics Driver cliprect Handling Local Privilege Escalation

Source: CCN
Type: BID-53971
Linux Kernel 'i915_gem_execbuffer.c' Multiple Integer Overflow Vulnerabilities

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: CCN
Type: Red Hat Bugzilla Bug 824176
CVE-2012-2383 kernel: drm/i915: integer overflow in i915_gem_execbuffer2()

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: XF
Type: UNKNOWN
kernel-i915gemexecbuffer2-dos(76279)

Source: secalert@redhat.com
Type: Exploit, Patch
secalert@redhat.com

Vulnerable Configuration:

Configuration RedHat 1:

cpe:/o:redhat:enterprise_linux:6:*:*:*:*:*:*:*

Configuration RedHat 2:

cpe:/o:redhat:enterprise_linux:6::client:*:*:*:*:*

Configuration RedHat 3:

cpe:/o:redhat:enterprise_linux:6::computenode:*:*:*:*:*

Configuration RedHat 4:

cpe:/o:redhat:enterprise_linux:6::server:*:*:*:*:*

Configuration RedHat 5:

cpe:/o:redhat:enterprise_linux:6::workstation:*:*:*:*:*

Configuration CCN 1:

cpe:/o:linux:linux_kernel:3.3:rc7:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:3.3:rc4:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:3.3:rc3:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:3.3:rc6:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:3.3:rc5:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:3.3:rc2:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:3.3:rc1:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:3.3:-:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:3.3.1:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:3.3.2:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:3.3.3:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:3.3.4:*:*:*:*:*:*:*

AND

cpe:/o:redhat:enterprise_linux:6:*:server:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:6:*:workstation:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux_desktop:6:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux_hpc_node:6:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20122383	V	CVE-2012-2383	2022-05-20
oval:org.opensuse.security:def:33112	P	Security update for python-numpy (Moderate) (in QA)	2022-01-17
oval:org.opensuse.security:def:33063	P	Security update for xorg-x11-server (Important)	2021-12-14
oval:org.opensuse.security:def:33006	P	Security update for openssl (Low)	2021-09-20
oval:org.opensuse.security:def:33895	P	Security update for sudo (Important)	2021-04-20
oval:org.opensuse.security:def:32399	P	Security update for unzip (Moderate)	2020-12-01
oval:org.opensuse.security:def:29169	P	Security update for mailman (Important)	2020-12-01
oval:org.opensuse.security:def:28377	P	Security update for quagga (Important)	2020-12-01
oval:org.opensuse.security:def:28553	P	Security update for flash-player	2020-12-01
oval:org.opensuse.security:def:28730	P	Security update for krb5	2020-12-01
oval:org.opensuse.security:def:28035	P	Fixing security issues on OBS toolchain (Important)	2020-12-01
oval:org.opensuse.security:def:33856	P	Security update for inst-source-utils	2020-12-01
oval:org.opensuse.security:def:32388	P	Security update for tomcat6 (Important)	2020-12-01
oval:org.opensuse.security:def:29125	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:28514	P	Security update for openssl1 (Important)	2020-12-01
oval:org.opensuse.security:def:32850	P	e2fsprogs on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:28673	P	Security update for MozillaFirefox, mozilla-nspr (Important)	2020-12-01
oval:org.opensuse.security:def:27907	P	Security update for Xen	2020-12-01
oval:org.opensuse.security:def:33218	P	openssh on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:32387	P	Security update for tomcat6 (Moderate)	2020-12-01
oval:org.opensuse.security:def:29108	P	Security update for java-1_6_0-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:28465	P	Security update for xorg-x11-libXdmcp (Moderate)	2020-12-01
oval:org.opensuse.security:def:32763	P	pam_ldap on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:28588	P	Security update for Mozilla NSS	2020-12-01
oval:org.opensuse.security:def:29287	P	Security update for Real Time Linux kernel	2020-12-01
oval:org.opensuse.security:def:27843	P	Security update for net-snmp (Moderate)	2020-12-01
oval:org.opensuse.security:def:33174	P	libproxy0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29069	P	Security update for clamav (Moderate)	2020-12-01
oval:org.opensuse.security:def:28412	P	Security update for tiff (Moderate)	2020-12-01
oval:org.opensuse.security:def:32706	P	libcap-progs on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:28457	P	Security update for xen (Moderate)	2020-12-01
oval:org.opensuse.security:def:29251	P	Security update for syslog-ng (Moderate)	2020-12-01
oval:org.opensuse.security:def:27832	P	Security update for lxc (Moderate)	2020-12-01
oval:org.opensuse.security:def:33151	P	libgcrypt11 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29020	P	Security update for resource-agents (Important)	2020-12-01
oval:org.opensuse.security:def:28260	P	Security update for lynx (Moderate)	2020-12-01
oval:org.opensuse.security:def:32612	P	w3m on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29843	P	Security update for Linux kernel	2020-12-01
oval:org.opensuse.security:def:28389	P	Security update for samba (Important)	2020-12-01
oval:org.opensuse.security:def:28613	P	Security update for xorg-x11-server	2020-12-01
oval:org.opensuse.security:def:27831	P	Security update for lxc	2020-12-01
oval:org.opensuse.security:def:28966	P	Security update for openssh (Critical)	2020-12-01
oval:org.opensuse.security:def:28176	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:32477	P	Security update for zlib (Moderate)	2020-12-01
oval:org.opensuse.security:def:29807	P	Security update for jakarta-commons-collections (Moderate)	2020-12-01
oval:org.opensuse.security:def:28378	P	Security update for quagga (Important)	2020-12-01
oval:org.opensuse.security:def:28569	P	Security update for lcms	2020-12-01
oval:org.opensuse.security:def:28814	P	Security update for procmail	2020-12-01
oval:org.opensuse.security:def:28119	P	Security update for gstreamer-0_10-plugins-base (Moderate)	2020-12-01
oval:org.mitre.oval:def:17987	P	USN-1472-1 -- linux vulnerabilities	2014-06-30
oval:org.mitre.oval:def:17344	P	USN-1471-1 -- linux-lts-backport-oneiric vulnerabilities	2014-06-30
oval:org.mitre.oval:def:17991	P	USN-1474-1 -- linux-ti-omap4 vulnerabilities	2014-06-30
oval:org.mitre.oval:def:17660	P	USN-1473-1 -- linux vulnerabilities	2014-06-30
oval:org.mitre.oval:def:17983	P	USN-1476-1 -- linux-ti-omap4 vulnerabilities	2014-06-30
oval:org.mitre.oval:def:23692	P	ELSA-2012:1156: kernel security and bug fix update (Moderate)	2014-05-26
oval:org.mitre.oval:def:20658	P	RHSA-2012:1156: kernel security and bug fix update (Moderate)	2014-02-24
oval:com.redhat.rhsa:def:20121156	P	RHSA-2012:1156: kernel security and bug fix update (Moderate)	2012-08-14
oval:com.ubuntu.precise:def:20122383000	V	CVE-2012-2383 on Ubuntu 12.04 LTS (precise) - low.	2012-06-13
oval:com.ubuntu.xenial:def:201223830000000	V	CVE-2012-2383 on Ubuntu 16.04 LTS (xenial) - low.	2012-06-13
oval:com.ubuntu.trusty:def:20122383000	V	CVE-2012-2383 on Ubuntu 14.04 LTS (trusty) - low.	2012-06-13
oval:com.ubuntu.xenial:def:20122383000	V	CVE-2012-2383 on Ubuntu 16.04 LTS (xenial) - low.	2012-06-13

BACK