Denial of Service Vulnerability in Linux Kernel - CVE-2012-3552
Summary
UBUNTU-CVE-2012-3552: Race condition in the IP implementation in the Linux kernel before 3.0 might allow remote attackers to cause a denial of service (slab corruption and system crash) by sending packets to an application that sets socket op... Affects linux versions < 3.11.0-12.19. Fixed in 3.11.0-12.19. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. It is widely used across various distributions, including Ubuntu. The kernel's functionality includes process management, memory management, device drivers, and system calls. This vulnerability affects the kernel's IP implementation, which is crucial for network communication, making it susceptible to denial of service attacks.
Vulnerability Detail
CVE-2012-3552 is a race condition vulnerability in the IP implementation of the Linux kernel prior to version 3.0. It allows remote attackers to send specially crafted packets to an application that sets socket options, potentially leading to slab corruption and system crashes. The vulnerability can be exploited to disrupt services, causing significant downtime and impacting system reliability. The CVSS score for this vulnerability is 5.9, indicating a medium severity level.
How To Fix
Minimum fixed version
3.11.0-12.19
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can limit the exposure of your system by configuring firewall rules to restrict incoming traffic to only trusted sources. This may help mitigate the risk of exploitation until the kernel can be updated.
Conclusion
CVE-2012-3552 is a significant vulnerability in the Linux kernel that can lead to denial of service attacks. It is crucial for users to update their systems to the patched version to mitigate risks. Additionally, using tools like Vulert can help monitor and alert for open-source vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
CVE-2012-3552 is a vulnerability in the Linux kernel that can lead to denial of service attacks due to a race condition in the IP implementation.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
Exploitation of this vulnerability can lead to system crashes and service disruptions, affecting the availability of applications running on the Linux kernel.
Yes, a patched version of the Linux kernel (3.11.0-12.19) is available to address this vulnerability.
If you cannot update the kernel immediately, consider implementing firewall rules to limit incoming traffic and reduce exposure to potential attacks.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
