Vulnerability Name:

CVE-2012-2384 (CCN-76280)

Assigned:2012-04-23
Published:2012-04-23
Updated:2023-02-13
Summary:Integer overflow in the i915_gem_do_execbuffer function in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 3.3.5 on 32-bit platforms allows local users to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted ioctl call.
CVSS v3 Severity:4.0 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Low
CVSS v2 Severity:4.9 Medium (CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C)
3.7 Low (Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
2.1 Low (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P)
1.6 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
4.9 Medium (REDHAT CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C)
3.7 Low (REDHAT Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
Vulnerability Type:CWE-190
Vulnerability Consequences:Denial of Service
References:Source: MITRE
Type: CNA
CVE-2012-2384

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: CCN
Type: Linux Kernel GIT Repository
drm/i915: fix integer overflow in i915_gem_execbuffer2()

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: CCN
Type: RHSA-2012-1304
Moderate: kernel security and bug fix update

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: CCN
Type: OSVDB ID: 83073
Linux Kernel on 32-bit i915 Graphics Driver buffer_count Handling Local Privilege Escalation

Source: CCN
Type: BID-53971
Linux Kernel 'i915_gem_execbuffer.c' Multiple Integer Overflow Vulnerabilities

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: CCN
Type: Red Hat Bugzilla Bug 824178
CVE-2012-2384 kernel: drm/i915: integer overflow in i915_gem_do_execbuffer()

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: XF
Type: UNKNOWN
kernel-i915gemdoexecbuffer-dos(76280)

Source: secalert@redhat.com
Type: Patch
secalert@redhat.com

Vulnerable Configuration:Configuration RedHat 1:
  • cpe:/o:redhat:enterprise_linux:6:*:*:*:*:*:*:*
    • Configuration RedHat 2:
  • cpe:/o:redhat:enterprise_linux:6::client:*:*:*:*:*
    • Configuration RedHat 3:
  • cpe:/o:redhat:enterprise_linux:6::computenode:*:*:*:*:*
    • Configuration RedHat 4:
  • cpe:/o:redhat:enterprise_linux:6::server:*:*:*:*:*
    • Configuration RedHat 5:
  • cpe:/o:redhat:enterprise_linux:6::workstation:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/o:linux:linux_kernel:3.3:rc7:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:3.3:rc4:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:3.3:rc3:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:3.3:rc6:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:3.3:rc5:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:3.3:rc2:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:3.3:rc1:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:3.3:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:3.3.1:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:3.3.2:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:3.3.3:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:3.3.4:*:*:*:*:*:*:*
  • AND
  • cpe:/o:redhat:enterprise_linux:6:*:server:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:6:*:workstation:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux_desktop:6:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux_hpc_node:6:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:20122384
    V
    		CVE-2012-2384
    2022-05-20
    oval:org.opensuse.security:def:33112
    P
    		Security update for python-numpy (Moderate) (in QA)
    2022-01-17
    oval:org.opensuse.security:def:33063
    P
    		Security update for xorg-x11-server (Important)
    2021-12-14
    oval:org.opensuse.security:def:33006
    P
    		Security update for openssl (Low)
    2021-09-20
    oval:org.opensuse.security:def:33895
    P
    		Security update for sudo (Important)
    2021-04-20
    oval:org.opensuse.security:def:32399
    P
    		Security update for unzip (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29169
    P
    		Security update for mailman (Important)
    2020-12-01
    oval:org.opensuse.security:def:28377
    P
    		Security update for quagga (Important)
    2020-12-01
    oval:org.opensuse.security:def:28553
    P
    		Security update for flash-player
    2020-12-01
    oval:org.opensuse.security:def:28730
    P
    		Security update for krb5
    2020-12-01
    oval:org.opensuse.security:def:28035
    P
    		Fixing security issues on OBS toolchain (Important)
    2020-12-01
    oval:org.opensuse.security:def:33856
    P
    		Security update for inst-source-utils
    2020-12-01
    oval:org.opensuse.security:def:32388
    P
    		Security update for tomcat6 (Important)
    2020-12-01
    oval:org.opensuse.security:def:29125
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:28514
    P
    		Security update for openssl1 (Important)
    2020-12-01
    oval:org.opensuse.security:def:32850
    P
    		e2fsprogs on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:28673
    P
    		Security update for MozillaFirefox, mozilla-nspr (Important)
    2020-12-01
    oval:org.opensuse.security:def:27907
    P
    		Security update for Xen
    2020-12-01
    oval:org.opensuse.security:def:33218
    P
    		openssh on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32387
    P
    		Security update for tomcat6 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29108
    P
    		Security update for java-1_6_0-ibm (Important)
    2020-12-01
    oval:org.opensuse.security:def:28465
    P
    		Security update for xorg-x11-libXdmcp (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32763
    P
    		pam_ldap on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:28588
    P
    		Security update for Mozilla NSS
    2020-12-01
    oval:org.opensuse.security:def:29287
    P
    		Security update for Real Time Linux kernel
    2020-12-01
    oval:org.opensuse.security:def:27843
    P
    		Security update for net-snmp (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33174
    P
    		libproxy0 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29069
    P
    		Security update for clamav (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:28412
    P
    		Security update for tiff (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32706
    P
    		libcap-progs on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:28457
    P
    		Security update for xen (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29251
    P
    		Security update for syslog-ng (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27832
    P
    		Security update for lxc (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33151
    P
    		libgcrypt11 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29020
    P
    		Security update for resource-agents (Important)
    2020-12-01
    oval:org.opensuse.security:def:28260
    P
    		Security update for lynx (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32612
    P
    		w3m on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29843
    P
    		Security update for Linux kernel
    2020-12-01
    oval:org.opensuse.security:def:28389
    P
    		Security update for samba (Important)
    2020-12-01
    oval:org.opensuse.security:def:28613
    P
    		Security update for xorg-x11-server
    2020-12-01
    oval:org.opensuse.security:def:27831
    P
    		Security update for lxc
    2020-12-01
    oval:org.opensuse.security:def:28966
    P
    		Security update for openssh (Critical)
    2020-12-01
    oval:org.opensuse.security:def:28176
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:32477
    P
    		Security update for zlib (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:29807
    P
    		Security update for jakarta-commons-collections (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:28378
    P
    		Security update for quagga (Important)
    2020-12-01
    oval:org.opensuse.security:def:28569
    P
    		Security update for lcms
    2020-12-01
    oval:org.opensuse.security:def:28814
    P
    		Security update for procmail
    2020-12-01
    oval:org.opensuse.security:def:28119
    P
    		Security update for gstreamer-0_10-plugins-base (Moderate)
    2020-12-01
    oval:org.mitre.oval:def:17987
    P
    		USN-1472-1 -- linux vulnerabilities
    2014-06-30
    oval:org.mitre.oval:def:17344
    P
    		USN-1471-1 -- linux-lts-backport-oneiric vulnerabilities
    2014-06-30
    oval:org.mitre.oval:def:17991
    P
    		USN-1474-1 -- linux-ti-omap4 vulnerabilities
    2014-06-30
    oval:org.mitre.oval:def:17660
    P
    		USN-1473-1 -- linux vulnerabilities
    2014-06-30
    oval:org.mitre.oval:def:17983
    P
    		USN-1476-1 -- linux-ti-omap4 vulnerabilities
    2014-06-30
    oval:org.mitre.oval:def:23789
    P
    		ELSA-2012:1304: kernel security and bug fix update (Moderate)
    2014-05-26
    oval:org.mitre.oval:def:21577
    P
    		RHSA-2012:1304: kernel security and bug fix update (Moderate)
    2014-02-24
    oval:com.redhat.rhsa:def:20121304
    P
    		RHSA-2012:1304: kernel security and bug fix update (Moderate)
    2012-09-25
    oval:com.ubuntu.precise:def:20122384000
    V
    		CVE-2012-2384 on Ubuntu 12.04 LTS (precise) - low.
    2012-06-13
    oval:com.ubuntu.xenial:def:201223840000000
    V
    		CVE-2012-2384 on Ubuntu 16.04 LTS (xenial) - low.
    2012-06-13
    oval:com.ubuntu.trusty:def:20122384000
    V
    		CVE-2012-2384 on Ubuntu 14.04 LTS (trusty) - low.
    2012-06-13
    oval:com.ubuntu.xenial:def:20122384000
    V
    		CVE-2012-2384 on Ubuntu 16.04 LTS (xenial) - low.
    2012-06-13
    BACK
    linux linux kernel 3.3 rc7
    linux linux kernel 3.3 rc4
    linux linux kernel 3.3 rc3
    linux linux kernel 3.3 rc6
    linux linux kernel 3.3 rc5
    linux linux kernel 3.3 rc2
    linux linux kernel 3.3 rc1
    linux linux kernel 3.3
    linux linux kernel 3.3.1
    linux linux kernel 3.3.2
    linux linux kernel 3.3.3
    linux linux kernel 3.3.4
    redhat enterprise linux 6
    redhat enterprise linux 6
    redhat enterprise linux desktop 6
    redhat enterprise linux hpc node 6