NVD Vulnerability Detail

CVE-2012-3412

Summary	The sfc (aka Solarflare Solarstorm) driver in the Linux kernel before 3.2.30 allows remote attackers to cause a denial of service (DMA descriptor consumption and network-controller outage) via crafted TCP packets that trigger a small MSS value.
Publication Date	Oct. 3, 2012, 8:02 p.m.
Registration Date	Jan. 28, 2021, 3 p.m.
Last Update	Nov. 21, 2024, 10:40 a.m.

CVSS2.0 : HIGH
Score	7.8
Vector	AV:N/AC:L/Au:N/C:N/I:N/A:C
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃前の認証要否(Au)	不要
機密性への影響(C)	なし
完全性への影響(I)	なし
可用性への影響(A)	高
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	いいえ

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:o:linux:linux_kernel::::::::				3.0.44
cpe:2.3:o:linux:linux_kernel::::::::	3.1			3.2.30
cpe:2.3:o:linux:linux_kernel::::::::	3.3			3.4.12
cpe:2.3:o:linux:linux_kernel::::::::	3.5			3.5.5

Configuration2	or higher	or less	more than	less than
cpe:2.3:o:canonical:ubuntu_linux:11.04:::::::*
cpe:2.3:o:canonical:ubuntu_linux:11.10:::::::*
cpe:2.3:o:canonical:ubuntu_linux:10.04::::-:::
cpe:2.3:o:canonical:ubuntu_linux:12.04::::-:::

Related information, measures and tools

No	URL	タグ
1	http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00005.html	Broken Link Mailing List Third Party Advisory
2	http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00005.html	Broken Link Mailing List Third Party Advisory
3	http://rhn.redhat.com/errata/RHSA-2012-1323.html	Third Party Advisory
4	http://rhn.redhat.com/errata/RHSA-2012-1323.html	Third Party Advisory
5	http://rhn.redhat.com/errata/RHSA-2012-1324.html	Third Party Advisory
6	http://rhn.redhat.com/errata/RHSA-2012-1324.html	Third Party Advisory
7	http://rhn.redhat.com/errata/RHSA-2012-1347.html	Third Party Advisory
8	http://rhn.redhat.com/errata/RHSA-2012-1347.html	Third Party Advisory
9	http://rhn.redhat.com/errata/RHSA-2012-1375.html	Third Party Advisory
10	http://rhn.redhat.com/errata/RHSA-2012-1375.html	Third Party Advisory
11	http://rhn.redhat.com/errata/RHSA-2012-1401.html	Third Party Advisory
12	http://rhn.redhat.com/errata/RHSA-2012-1401.html	Third Party Advisory
13	http://rhn.redhat.com/errata/RHSA-2012-1430.html	Third Party Advisory
14	http://rhn.redhat.com/errata/RHSA-2012-1430.html	Third Party Advisory
15	http://secunia.com/advisories/50633	Broken Link
16	http://secunia.com/advisories/50633	Broken Link
17	http://secunia.com/advisories/50732	Broken Link
18	http://secunia.com/advisories/50732	Broken Link
19	http://secunia.com/advisories/50811	Broken Link
20	http://secunia.com/advisories/50811	Broken Link
21	http://secunia.com/advisories/51193	Broken Link
22	http://secunia.com/advisories/51193	Broken Link
23	http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.30	Vendor Advisory
24	http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.30	Vendor Advisory
25	http://www.openwall.com/lists/oss-security/2012/08/03/4	Mailing List Third Party Advisory
26	http://www.openwall.com/lists/oss-security/2012/08/03/4	Mailing List Third Party Advisory
27	http://www.ubuntu.com/usn/USN-1567-1	Third Party Advisory
28	http://www.ubuntu.com/usn/USN-1567-1	Third Party Advisory
29	http://www.ubuntu.com/usn/USN-1568-1	Third Party Advisory
30	http://www.ubuntu.com/usn/USN-1568-1	Third Party Advisory
31	http://www.ubuntu.com/usn/USN-1572-1	Third Party Advisory
32	http://www.ubuntu.com/usn/USN-1572-1	Third Party Advisory
33	http://www.ubuntu.com/usn/USN-1575-1	Third Party Advisory
34	http://www.ubuntu.com/usn/USN-1575-1	Third Party Advisory
35	http://www.ubuntu.com/usn/USN-1577-1	Third Party Advisory
36	http://www.ubuntu.com/usn/USN-1577-1	Third Party Advisory
37	http://www.ubuntu.com/usn/USN-1578-1	Third Party Advisory
38	http://www.ubuntu.com/usn/USN-1578-1	Third Party Advisory
39	http://www.ubuntu.com/usn/USN-1579-1	Third Party Advisory
40	http://www.ubuntu.com/usn/USN-1579-1	Third Party Advisory
41	http://www.ubuntu.com/usn/USN-1580-1	Third Party Advisory
42	http://www.ubuntu.com/usn/USN-1580-1	Third Party Advisory
43	https://bugzilla.redhat.com/show_bug.cgi?id=844714	Issue Tracking Third Party Advisory
44	https://bugzilla.redhat.com/show_bug.cgi?id=844714	Issue Tracking Third Party Advisory
45	https://github.com/torvalds/linux/commit/68cb695ccecf949d48949e72f8ce591fdaaa325c	Exploit Third Party Advisory
46	https://github.com/torvalds/linux/commit/68cb695ccecf949d48949e72f8ce591fdaaa325c	Exploit Third Party Advisory
47	https://www.suse.com/support/update/announcement/2012/suse-su-20121679-1.html	Third Party Advisory
48	https://www.suse.com/support/update/announcement/2012/suse-su-20121679-1.html	Third Party Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-189	数値処理の問題	https://cwe.mitre.org/data/definitions/189.html

JVN Vulnerability Information

Linux Kernel の sfc ドライバにおけるサービス運用妨害 (DoS) の脆弱性

Title	Linux Kernel の sfc ドライバにおけるサービス運用妨害 (DoS) の脆弱性
Summary	Linux Kernel の sfc ドライバには、サービス運用妨害 (DMA ディスクリプタ消費およびネットワークコントローラの停止) 状態となる脆弱性が存在します。
Possible impacts	第三者により、過度に小さな MSS 値を誘発する巧妙に細工された TCP パケットを介して、サービス運用妨害 (DMA ディスクリプタ消費およびネットワークコントローラの停止) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Sept. 19, 2012, midnight
Registration Date	Oct. 4, 2012, 4:18 p.m.
Last Update	Nov. 9, 2012, 3:59 p.m.

Affected System

Linux

Linux Kernel 3.2.30 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2012-3412	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3412
National Vulnerability Database (NVD)
2	CVE-2012-3412	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-3412

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-189	https://jvndb.jvn.jp/ja/cwe/CWE-189.html

ベンダー情報

No	Name	URL
ChangeLog
1	ChangeLog-3.2.30	http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.30
GitHub
2	sfc: Fix maximum number of TSO segments and minimum TX queue size	https://github.com/torvalds/linux/commit/68cb695ccecf949d48949e72f8ce591fdaaa325c
Linux Kernel
3	Linux Kernel Archives	http://www.kernel.org
opensuse-security-announce
4	openSUSE-SU-2012:1330	http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00005.html
Red Hat Bugzilla
5	Bug 844714	https://bugzilla.redhat.com/show_bug.cgi?id=844714
Red Hat Security Advisory
6	RHSA-2012:1375	http://rhn.redhat.com/errata/RHSA-2012-1375.html
Ubuntu Security Notice
7	USN-1567-1	http://www.ubuntu.com/usn/USN-1567-1
8	USN-1568-1	http://www.ubuntu.com/usn/USN-1568-1
9	USN-1572-1	http://www.ubuntu.com/usn/USN-1572-1
10	USN-1579-1	http://www.ubuntu.com/usn/USN-1579-1
11	USN-1580-1	http://www.ubuntu.com/usn/USN-1580-1

Change Log

No	Changed Details	Date of change
0	[2012年10月04日] 掲載 [2012年11月09日] ベンダ情報：レッドハット (RHSA-2012:1375) を追加ベンダ情報：Ubuntu (USN-1567-1) を追加ベンダ情報：Ubuntu (USN-1568-1) を追加ベンダ情報：Ubuntu (USN-1572-1) を追加ベンダ情報：Ubuntu (USN-1579-1) を追加ベンダ情報：Ubuntu (USN-1580-1) を追加ベンダ情報：openSUSE (openSUSE-SU-2012:1330) を追加	Feb. 17, 2018, 10:37 a.m.