Vulnerability Details : CVE-2012-2123
The cap_bprm_set_creds function in security/commoncap.c in the Linux kernel before 3.3.3 does not properly handle the use of file system capabilities (aka fcaps) for implementing a privileged executable file, which allows local users to bypass intended personality restrictions via a crafted application, as demonstrated by an attack that uses a parent process to disable ASLR.
Exploit prediction scoring system (EPSS) score for CVE-2012-2123
Probability of exploitation activity in the next 30 days: 0.04%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 11 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2012-2123
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
7.2
|
HIGH | AV:L/AC:L/Au:N/C:C/I:C/A:C |
3.9
|
10.0
|
NIST |
CWE ids for CVE-2012-2123
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2012-2123
-
http://www.debian.org/security/2012/dsa-2469
Debian -- Security Information -- DSA-2469-1 linux-2.6Third Party Advisory
-
http://www.openwall.com/lists/oss-security/2012/04/20/6
oss-security - Re: CVE request: kernel: fcaps: clear the same personality flags as suid when fcaps are usedMailing List;Third Party Advisory
-
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.3
Vendor Advisory
-
https://github.com/torvalds/linux/commit/d52fc5dde171f030170a6cb78034d166b13c9445
fcaps: clear the same personality flags as suid when fcaps are used · torvalds/linux@d52fc5d · GitHubThird Party Advisory
-
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d52fc5dde171f030170a6cb78034d166b13c9445
Broken Link
-
http://rhn.redhat.com/errata/RHSA-2012-0743.html
RHSA-2012:0743 - Security Advisory - Red Hat Customer PortalThird Party Advisory;VDB Entry
-
https://bugzilla.redhat.com/show_bug.cgi?id=806722
806722 – (CVE-2012-2123) CVE-2012-2123 kernel: fcaps: clear the same personality flags as suid when fcaps are usedIssue Tracking
-
http://www.securitytracker.com/id?1027072
Linux Kernel fcap Lets Local Users Bypass Personality Flag Restrictions - SecurityTrackerThird Party Advisory;VDB Entry
-
http://www.securityfocus.com/bid/53166
Linux kernel fcaps Local Security Bypass VulnerabilityThird Party Advisory;VDB Entry
-
http://rhn.redhat.com/errata/RHSA-2012-0670.html
RHSA-2012:0670 - Security Advisory - Red Hat Customer PortalThird Party Advisory;VDB Entry
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/75043
Linux Kernel fcaps security bypass CVE-2012-2123 Vulnerability ReportVDB Entry
Products affected by CVE-2012-2123
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*