National Cyber Awareness System

Vulnerability Summary for CVE-2012-1583

Overview

Double free vulnerability in the xfrm6_tunnel_rcv function in net/ipv6/xfrm6_tunnel.c in the Linux kernel before 2.6.22, when the xfrm6_tunnel module is enabled, allows remote attackers to cause a denial of service (panic) via crafted IPv6 packets.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: https://github.com/torvalds/linux/commit/d0772b70faaf8e9f2013b6c4273d94d5eac8047a

Type: Patch Information; Exploit

Hyperlink:https://github.com/torvalds/linux/commit/d0772b70faaf8e9f2013b6c4273d94d5eac8047a

External Source: CONFIRM

Name: https://bugzilla.redhat.com/show_bug.cgi?id=752304

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=752304

External Source: SECTRACK

Name: 1026930

Hyperlink:http://www.securitytracker.com/id?1026930

External Source: BID

Name: 53139

Hyperlink:http://www.securityfocus.com/bid/53139

External Source: SECUNIA

Name: 48881

Hyperlink:http://secunia.com/advisories/48881

External Source: REDHAT

Name: RHSA-2012:0488

Hyperlink:http://rhn.redhat.com/errata/RHSA-2012-0488.html

External Source: CONFIRM

Name: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=d0772b70faaf8e9f2013b6c4273d94d5eac8047a

Hyperlink:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=d0772b70faaf8e9f2013b6c4273d94d5eac8047a

External Source: CONFIRM

Name: http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22

Hyperlink:http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22