CVE-2012-0056
NoneCVSS
—
EPSS
10.8%
Published
Jan 27, 2012
CISA due date
—
The record
The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when writing to /proc/<pid>/mem, which allows local users to gain privileges by modifying process memory, as demonstrated by Mempodipper.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:enterprise_linux:6::client | kernel | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::client | kernel-bootwrapper | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::client | kernel-debug | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::client | kernel-debug-debuginfo | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::client | kernel-debug-devel | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::client | kernel-debuginfo | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::client | kernel-debuginfo-common-i686 | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::client | kernel-debuginfo-common-ppc64 | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::client | kernel-debuginfo-common-s390x | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::client | kernel-debuginfo-common-x86_64 | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::client | kernel-devel | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::client | kernel-doc | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::client | kernel-firmware | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::client | kernel-headers | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::client | kernel-kdump | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::client | kernel-kdump-debuginfo | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::client | kernel-kdump-devel | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::client | perf | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::client | perf-debuginfo | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::client | python-perf | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::computenode | kernel | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::computenode | kernel-bootwrapper | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::computenode | kernel-debug | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::computenode | kernel-debug-debuginfo | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::computenode | kernel-debug-devel | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::computenode | kernel-debuginfo | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::computenode | kernel-debuginfo-common-i686 | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::computenode | kernel-debuginfo-common-ppc64 | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::computenode | kernel-debuginfo-common-s390x | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::computenode | kernel-debuginfo-common-x86_64 | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::computenode | kernel-devel | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::computenode | kernel-doc | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::computenode | kernel-firmware | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::computenode | kernel-headers | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::computenode | kernel-kdump | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::computenode | kernel-kdump-debuginfo | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::computenode | kernel-kdump-devel | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::computenode | perf | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::computenode | perf-debuginfo | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::computenode | python-perf | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::server | kernel | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::server | kernel-bootwrapper | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::server | kernel-debug | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::server | kernel-debug-debuginfo | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::server | kernel-debug-devel | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::server | kernel-debuginfo | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::server | kernel-debuginfo-common-i686 | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::server | kernel-debuginfo-common-ppc64 | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::server | kernel-debuginfo-common-s390x | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::server | kernel-debuginfo-common-x86_64 | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::server | kernel-devel | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::server | kernel-doc | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::server | kernel-firmware | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::server | kernel-headers | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::server | kernel-kdump | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::server | kernel-kdump-debuginfo | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::server | kernel-kdump-devel | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::server | perf | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::server | perf-debuginfo | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::server | python-perf | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::workstation | kernel | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::workstation | kernel-bootwrapper | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::workstation | kernel-debug | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::workstation | kernel-debug-debuginfo | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::workstation | kernel-debug-devel | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::workstation | kernel-debuginfo | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::workstation | kernel-debuginfo-common-i686 | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::workstation | kernel-debuginfo-common-ppc64 | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::workstation | kernel-debuginfo-common-s390x | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::workstation | kernel-debuginfo-common-x86_64 | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::workstation | kernel-devel | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::workstation | kernel-doc | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::workstation | kernel-firmware | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::workstation | kernel-headers | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::workstation | kernel-kdump | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::workstation | kernel-kdump-debuginfo | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::workstation | kernel-kdump-devel | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::workstation | perf | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::workstation | perf-debuginfo | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_linux:6::workstation | python-perf | 0 | 0:2.6.32-220.4.1.el6 |
| Red Hat:enterprise_mrg:2:server:el6 | kernel-rt | 0 | 0:3.0.9-rt26.46.el6rt |
| Red Hat:enterprise_mrg:2:server:el6 | kernel-rt-debug | 0 | 0:3.0.9-rt26.46.el6rt |
| Red Hat:enterprise_mrg:2:server:el6 | kernel-rt-debug-debuginfo | 0 | 0:3.0.9-rt26.46.el6rt |
| Red Hat:enterprise_mrg:2:server:el6 | kernel-rt-debug-devel | 0 | 0:3.0.9-rt26.46.el6rt |
| Red Hat:enterprise_mrg:2:server:el6 | kernel-rt-debuginfo | 0 | 0:3.0.9-rt26.46.el6rt |
| Red Hat:enterprise_mrg:2:server:el6 | kernel-rt-debuginfo-common-x86_64 | 0 | 0:3.0.9-rt26.46.el6rt |
| Red Hat:enterprise_mrg:2:server:el6 | kernel-rt-devel | 0 | 0:3.0.9-rt26.46.el6rt |
| Red Hat:enterprise_mrg:2:server:el6 | kernel-rt-doc | 0 | 0:3.0.9-rt26.46.el6rt |
| Red Hat:enterprise_mrg:2:server:el6 | kernel-rt-firmware | 0 | 0:3.0.9-rt26.46.el6rt |
| Red Hat:enterprise_mrg:2:server:el6 | kernel-rt-trace | 0 | 0:3.0.9-rt26.46.el6rt |
| Red Hat:enterprise_mrg:2:server:el6 | kernel-rt-trace-debuginfo | 0 | 0:3.0.9-rt26.46.el6rt |
| Red Hat:enterprise_mrg:2:server:el6 | kernel-rt-trace-devel | 0 | 0:3.0.9-rt26.46.el6rt |
| Red Hat:enterprise_mrg:2:server:el6 | kernel-rt-vanilla | 0 | 0:3.0.9-rt26.46.el6rt |
| Red Hat:enterprise_mrg:2:server:el6 | kernel-rt-vanilla-debuginfo | 0 | 0:3.0.9-rt26.46.el6rt |
| Red Hat:enterprise_mrg:2:server:el6 | kernel-rt-vanilla-devel | 0 | 0:3.0.9-rt26.46.el6rt |
| Ubuntu:14.04:LTS | linux | 0 | 3.11.0-12.19 |
| Ubuntu:14.04:LTS | linux-aws | 0 | 4.4.0-1002.2 |
| Ubuntu:14.04:LTS | linux-flo | 0 | 3.4.0-1.3 |
| Ubuntu:14.04:LTS | linux-goldfish | 0 | 3.4.0-1.9 |
| Ubuntu:14.04:LTS | linux-lts-utopic | 0 | 3.16.0-25.33~14.04.2 |
| Ubuntu:14.04:LTS | linux-lts-vivid | 0 | 3.19.0-18.18~14.04.1 |
| Ubuntu:14.04:LTS | linux-lts-wily | 0 | 4.2.0-18.22~14.04.1 |
| Ubuntu:14.04:LTS | linux-lts-xenial | 0 | 4.4.0-13.29~14.04.1 |
| Ubuntu:14.04:LTS | linux-mako | 0 | 3.4.0-3.21 |
| Ubuntu:14.04:LTS | linux-manta | 0 | 3.4.0-4.19 |
| Ubuntu:16.04:LTS | linux | 0 | 4.2.0-16.19 |
| Ubuntu:16.04:LTS | linux-aws | 0 | 4.4.0-1001.10 |
| Ubuntu:16.04:LTS | linux-flo | 0 | 3.4.0-5.22 |
| Ubuntu:16.04:LTS | linux-gke | 0 | 4.4.0-1003.3 |
| Ubuntu:16.04:LTS | linux-goldfish | 0 | 3.4.0-4.27 |
| Ubuntu:16.04:LTS | linux-hwe | 0 | 4.8.0-36.36~16.04.1 |
| Ubuntu:16.04:LTS | linux-mako | 0 | 3.4.0-7.40 |
| Ubuntu:16.04:LTS | linux-raspi2 | 0 | 4.2.0-1013.19 |
| Ubuntu:16.04:LTS | linux-snapdragon | 0 | 4.4.0-1012.12 |
| openSUSE:Tumbleweed | kernel-source | 0 | 4.8.13-1.1 |
Related vulnerabilities
- CVE-2019-0155 Insufficient access control in a subsystem for Intel (R) processor graphics in 6th, 7th… Also affects kernel
- CVE-2019-14835 A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux… Also affects kernel
- CVE-2019-1125 An information disclosure vulnerability exists when certain central processing units… Also affects kernel
- CVE-2019-11477 Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an… Also affects kernel
- CVE-2019-11478 Jonathan Looney discovered that the TCP retransmission queue implementation in… Also affects kernel
- CVE-2019-11479 Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. Also affects kernel
- CVE-2019-11487 The Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with… Also affects kernel
- CVE-2018-14634 An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. Also affects kernel