CVE-2012-0207 - Wieldy Clubs
Description
The igmp_heard_query function in net/ipv4/igmp.c in the Linux kernel before 3.2.1 allows remote attackers to cause a denial of service (divide-by-zero error and panic) via IGMP packets.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Reference
http://www.openwall.com/lists/oss-security/2012/01/10/5 https://bugzilla.redhat.com/show_bug.cgi?id=772867 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.1 https://github.com/torvalds/linux/commit/a8c1f65c79cbbb2f7da782d4c9d15639a9b94b27 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=a8c1f65c79cbbb2f7da782d4c9d15639a9b94b27 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=654876 https://github.com/torvalds/linux/commit/25c413ad0029ea86008234be28aee33456e53e5b
Attack Complexity
LOW
Privileges Required
NONE
User Interaction Required
NONE
Scope
NONE
Confidentiality Impact
UNCHANGED
Integrity Impact
NONE
Availability Impact
NONE
Base Score
HIGH
Base Severity
7.5