{"id":"CVE-2012-3552","published":"2012-10-03T10:00:00Z","modified":"2024-08-06T20:13:50Z","title":"Race condition in the IP implementation in the Linux kernel before 3.0 might allow remote attackers to cause a denial…","vendor":null,"product":null,"tier":"tail","description":{"text":"Race condition in the IP implementation in the Linux kernel before 3.0 might allow remote attackers to cause a denial of service (slab corruption and system crash) by sending packets to an application that sets socket options during the handling of network traffic.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.0285,"percentile":0.86664,"provenance":"source"},"cwes":[],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2012-1540.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://github.com/torvalds/linux/commit/f6d8bd051c391c1c0458a30b2a7abcd939329259","tags":["x_refsource_CONFIRM"]},{"url":"http://ftp.osuosl.org/pub/linux/kernel/v3.0/ChangeLog-3.0","tags":["x_refsource_CONFIRM"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f6d8bd051c391c1c0458a30b2a7abcd939329259","tags":["x_refsource_CONFIRM"]},{"url":"http://www.openwall.com/lists/oss-security/2012/08/31/11","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=853465","tags":["x_refsource_CONFIRM"]}],"priority":{"score":17.3,"factors":[{"name":"EPSS percentile","points":17.33}]},"euvd":{"id":"EUVD-2012-3499","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-cve-2012-3552-family-cve-2012-3552","children":[{"from":"CVE-2012-3552","to":"CVE-2013-2224","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"…rvice (invalid free operation and system crash) or possibly gain privileges via a sendmsg system call with the IP_RETOPTS option, as demonstrated by hemlock.c. NOTE: this vulnerability exists because of an incorrect fix for CVE-2012-3552.","from":"CVE.org","in":"CVE-2013-2224"}]},{"from":"CVE-2012-3552","to":"CVE-2017-9076","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["net/dccp/ipv6.c","net/ipv6/tcp_ipv6.c"],"commits":["https://github.com/torvalds/linux/commit/f6d8bd051c391c1c0458a30b2a7abcd939329259","https://github.com/torvalds/linux/commit/83eaddab4378db256d00d295bda6ca997cd13a52"],"basis":"shared function","functions":["sock"]}]},{"from":"CVE-2012-3552","to":"CVE-2017-9077","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["net/dccp/ipv6.c","net/ipv6/tcp_ipv6.c"],"commits":["https://github.com/torvalds/linux/commit/f6d8bd051c391c1c0458a30b2a7abcd939329259","https://github.com/torvalds/linux/commit/83eaddab4378db256d00d295bda6ca997cd13a52"],"basis":"shared function","functions":["sock"]}]}]}}