CVE-2012-0207

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

The igmp_heard_query function in net/ipv4/igmp.c in the Linux kernel before 3.2.1 allows remote attackers to cause a denial of service (divide-by-zero error and panic) via IGMP packets.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-369

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=654876Exploit, Mailing List, Third Party Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a8c1f65c79cbbb2f7da782d4c9d15639a9b94b27
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.1Mailing List, Patch, Vendor Advisory
http://www.openwall.com/lists/oss-security/2012/01/10/5Mailing List, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=772867Issue Tracking, Patch, Third Party Advisory
https://github.com/torvalds/linux/commit/25c413ad0029ea86008234be28aee33456e53e5bPatch, Third Party Advisory
https://github.com/torvalds/linux/commit/a8c1f65c79cbbb2f7da782d4c9d15639a9b94b27Patch, Third Party Advisory
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=654876Exploit, Mailing List, Third Party Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a8c1f65c79cbbb2f7da782d4c9d15639a9b94b27
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.1Mailing List, Patch, Vendor Advisory
http://www.openwall.com/lists/oss-security/2012/01/10/5Mailing List, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=772867Issue Tracking, Patch, Third Party Advisory
https://github.com/torvalds/linux/commit/25c413ad0029ea86008234be28aee33456e53e5bPatch, Third Party Advisory
https://github.com/torvalds/linux/commit/a8c1f65c79cbbb2f7da782d4c9d15639a9b94b27Patch, Third Party Advisory

Timeline

Published: May 17, 2012
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-02089.0Unspecified vulnerability in the Oracle Grid Engine component in Oracle Sun Products Suite 6.1 and 6.2 allows remote authenticated users to CVE-2012-02097.5Horde 3.3.12, Horde Groupware 1.2.10, and Horde Groupware Webmail Edition 1.2.10, as distributed by FTP between November 2011 and February 2 CVE-2012-02109.3debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to obtain system information and execute arb CVE-2012-02119.3debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarb CVE-2012-02129.3debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via shell metachar CVE-2012-02135.0The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause CVE-2012-02144.3The pkgAcqMetaClearSig::Failed method in apt-pkg/acquire-item.cc in Advanced Package Tool (APT) 0.8.11 through 0.8.15.10 and 0.8.16 before 0 CVE-2012-02155.5model/modelstorage.py in the Tryton application framework (trytond) before 2.4.0 for Python does not properly restrict access to the Many2Ma CVE-2012-02164.4The default configuration of the apache2 package in Debian GNU/Linux squeeze before 2.2.16-6+squeeze7, wheezy before 2.2.22-4, and sid befor CVE-2012-02177.2The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Orac CVE-2012-02181.9Xen 3.4, 4.0, and 4.1, when the guest OS has not registered a handler for a syscall or sysenter instruction, does not properly clear a flag CVE-2012-02196.2Heap-based buffer overflow in the xioscan_readline function in xio-readline.c in socat 1.4.0.0 through 1.7.2.0 and 2.0.0-b1 through 2.0.0-b4