CVE-2012-2100

EUVD-2012-2104

03.07.2012, 16:40

The ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel before 3.2.2, on the x86 platform and unspecified other platforms, allows user-assisted remote attackers to trigger inconsistent filesystem-groups data and possibly cause a denial of service via a malformed ext4 filesystem containing a super block with a large FLEX_BG group size (aka s_log_groups_per_flex value).  NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-4307.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.1 UNKNOWN	NETWORK	MEDIUM		AV:N/AC:M/Au:N/C:N/I:N/A:C

Base Score

CVSS 3.x

EPSS Score

Percentile: 74%

Affected Products (NVD)

Vendor	Product	Version
linux	linux_kernel	𝑥 ≤ 3.2.1
linux	linux_kernel	3.2

𝑥

= Vulnerable software versions

Ubuntu Releases

Ubuntu Product

Codename

linux

hardy	not-affected
lucid	Fixed 2.6.32-39.86 released
natty	Fixed 2.6.38-15.59 released
oneiric	Fixed 3.0.0-16.29 released
precise	not-affected
quantal	not-affected
raring	not-affected
saucy	not-affected
trusty	not-affected
utopic	not-affected
vivid	not-affected
wily	not-affected
xenial	not-affected
yakkety	not-affected
zesty	not-affected

linux-armadaxp

hardy	dne
lucid	dne
natty	dne
oneiric	dne
precise	not-affected
quantal	not-affected
raring	dne
saucy	dne
trusty	dne
utopic	dne
vivid	dne
wily	dne
xenial	dne
yakkety	dne
zesty	dne

linux-aws

precise	dne
trusty	not-affected
xenial	not-affected
yakkety	dne
zesty	dne

linux-ec2

hardy	dne
lucid	Fixed 2.6.32-343.45 released
natty	dne
oneiric	dne
precise	dne
quantal	dne
raring	dne
saucy	dne
trusty	dne
utopic	dne
vivid	dne
wily	dne
xenial	dne
yakkety	dne
zesty	dne

linux-flo

lucid	dne
precise	dne
quantal	dne
saucy	dne
trusty	dne
utopic	not-affected
vivid	not-affected
wily	not-affected
xenial	not-affected
yakkety	not-affected
zesty	dne

linux-fsl-imx51

hardy	dne
lucid	ignored
natty	dne
oneiric	dne
precise	dne
quantal	dne
raring	dne
saucy	dne
trusty	dne
utopic	dne
vivid	dne
wily	dne
xenial	dne
yakkety	dne
zesty	dne

linux-gke

precise	dne
trusty	dne
xenial	not-affected
yakkety	dne
zesty	dne

linux-goldfish

lucid	dne
precise	dne
quantal	dne
saucy	ignored
trusty	dne
utopic	not-affected
vivid	not-affected
wily	not-affected
xenial	not-affected
yakkety	not-affected
zesty	not-affected

linux-grouper

lucid	dne
precise	dne
quantal	dne
saucy	ignored
trusty	dne
utopic	ignored
vivid	dne
wily	dne
xenial	dne
yakkety	dne
zesty	dne

linux-hwe

precise	dne
trusty	dne
xenial	not-affected
yakkety	dne
zesty	dne

linux-hwe-edge

precise	dne
trusty	dne
xenial	not-affected
yakkety	dne
zesty	dne

linux-lts-backport-maverick

hardy	dne
lucid	ignored
natty	dne
oneiric	dne
precise	dne
quantal	dne
raring	dne
saucy	dne
trusty	dne
utopic	dne
vivid	dne
wily	dne
xenial	dne
yakkety	dne
zesty	dne

linux-lts-backport-natty

hardy	dne
lucid	Fixed 2.6.38-15.59~lucid1 released
natty	dne
oneiric	dne
precise	dne
quantal	dne
raring	dne
saucy	dne
trusty	dne
utopic	dne
vivid	dne
wily	dne
xenial	dne
yakkety	dne
zesty	dne

linux-lts-backport-oneiric

hardy	dne
lucid	Fixed 3.0.0-16.29~lucid1 released
natty	dne
oneiric	dne
precise	dne
quantal	dne
raring	dne
saucy	dne
trusty	dne
utopic	dne
vivid	dne
wily	dne
xenial	dne
yakkety	dne
zesty	dne

linux-lts-quantal

hardy	dne
lucid	dne
oneiric	dne
precise	not-affected
quantal	dne
raring	dne
saucy	dne
trusty	dne
utopic	dne
vivid	dne
wily	dne
xenial	dne
yakkety	dne
zesty	dne

linux-lts-raring

hardy	dne
lucid	dne
oneiric	dne
precise	not-affected
quantal	dne
raring	dne
saucy	dne
trusty	dne
utopic	dne
vivid	dne
wily	dne
xenial	dne
yakkety	dne
zesty	dne

linux-lts-trusty

lucid	dne
precise	not-affected
saucy	dne
trusty	dne
utopic	dne
vivid	dne
wily	dne
xenial	dne
yakkety	dne
zesty	dne

linux-lts-utopic

lucid	dne
precise	dne
trusty	dne
utopic	dne
vivid	dne
wily	dne
xenial	dne
yakkety	dne
zesty	dne

linux-lts-vivid

lucid	dne
precise	dne
trusty	dne
utopic	dne
vivid	dne
wily	dne
xenial	dne
yakkety	dne
zesty	dne

linux-lts-wily

precise	dne
trusty	dne
vivid	dne
wily	dne
xenial	dne
yakkety	dne
zesty	dne

linux-lts-xenial

precise	dne
trusty	not-affected
vivid	dne
wily	dne
xenial	dne
yakkety	dne
zesty	dne

linux-maguro

lucid	dne
precise	dne
quantal	dne
saucy	ignored
trusty	dne
utopic	dne
vivid	dne
wily	dne
xenial	dne
yakkety	dne
zesty	dne

linux-mako

lucid	dne
precise	dne
quantal	dne
saucy	ignored
trusty	dne
utopic	not-affected
vivid	not-affected
wily	not-affected
xenial	not-affected
yakkety	not-affected
zesty	dne

linux-manta

lucid	dne
precise	dne
quantal	dne
saucy	ignored
trusty	dne
utopic	not-affected
vivid	not-affected
wily	not-affected
xenial	dne
yakkety	dne
zesty	dne

linux-mvl-dove

hardy	dne
lucid	ignored
natty	dne
oneiric	dne
precise	dne
quantal	dne
raring	dne
saucy	dne
trusty	dne
utopic	dne
vivid	dne
wily	dne
xenial	dne
yakkety	dne
zesty	dne

linux-raspi2

precise	dne
trusty	dne
vivid	dne
wily	not-affected
xenial	not-affected
yakkety	not-affected
zesty	not-affected

linux-snapdragon

precise	dne
trusty	dne
wily	dne
xenial	not-affected
yakkety	not-affected
zesty	not-affected

linux-ti-omap4

hardy	dne
lucid	dne
natty	Fixed 2.6.38-1209.24 released
oneiric	Fixed 3.0.0-1207.17 released
precise	not-affected
quantal	not-affected
raring	not-affected
saucy	not-affected
trusty	dne
utopic	dne
vivid	dne
wily	dne
xenial	dne
yakkety	dne
zesty	dne

Common Weakness Enumeration

CWE-189 -

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d50f2ab6f050311dbf7b8f5501b25f0bf64a439b

http://rhn.redhat.com/errata/RHSA-2012-1445.html

http://rhn.redhat.com/errata/RHSA-2012-1580.html

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.2

http://www.openwall.com/lists/oss-security/2012/04/12/11

http://www.securityfocus.com/bid/53414

https://bugzilla.redhat.com/show_bug.cgi?id=809687

https://github.com/torvalds/linux/commit/d50f2ab6f050311dbf7b8f5501b25f0bf64a439b