CVE-2012-3552

MediumCVSS 5.9/10Last modified Jun 16, 2026

Description

Race condition in the IP implementation in the Linux kernel before 3.0 might allow remote attackers to cause a denial of service (slab corruption and system crash) by sending packets to an application that sets socket options during the handling of network traffic.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-362

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://ftp.osuosl.org/pub/linux/kernel/v3.0/ChangeLog-3.0Broken Link
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f6d8bd051c391c1c0458a30b2a7abcd939329259
http://rhn.redhat.com/errata/RHSA-2012-1540.htmlThird Party Advisory
http://www.openwall.com/lists/oss-security/2012/08/31/11Mailing List, Patch, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=853465Issue Tracking, Patch, Third Party Advisory
https://github.com/torvalds/linux/commit/f6d8bd051c391c1c0458a30b2a7abcd939329259Patch, Third Party Advisory
http://ftp.osuosl.org/pub/linux/kernel/v3.0/ChangeLog-3.0Broken Link
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f6d8bd051c391c1c0458a30b2a7abcd939329259
http://rhn.redhat.com/errata/RHSA-2012-1540.htmlThird Party Advisory
http://www.openwall.com/lists/oss-security/2012/08/31/11Mailing List, Patch, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=853465Issue Tracking, Patch, Third Party Advisory
https://github.com/torvalds/linux/commit/f6d8bd051c391c1c0458a30b2a7abcd939329259Patch, Third Party Advisory

Timeline

Published: Oct 3, 2012
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-35534.0chan_skinny.c in the Skinny (aka SCCP) channel driver in Asterisk Open Source 10.x before 10.5.1 allows remote authenticated users to cause CVE-2012-35547.5SQL injection vulnerability in the RSGallery2 (com_rsgallery2) component before 2.3.0 for Joomla! 1.5.x, and before 3.2.0 for Joomla! 2.5.x,CVE-2012-35557.6Opera before 11.65 does not ensure that keyboard sequences are associated with a visible window, which makes it easier for user-assisted rem CVE-2012-35569.3Opera before 11.65 does not properly restrict the opening of a pop-up window in response to the first click of a double-click action, which CVE-2012-35575.0Opera before 11.65 does not properly restrict the reading of JSON strings, which allows remote attackers to perform cross-domain loading of CVE-2012-35582.6Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during unusually timed changes to this field CVE-2012-355910.0Unspecified vulnerability in Opera before 12.00 on Mac OS X has unknown impact and attack vectors, related to a "moderate severity issue."CVE-2012-35604.3Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during blocked navigation, which makes it ea CVE-2012-356110.0Opera before 11.64 does not properly allocate memory for URL strings, which allows remote attackers to execute arbitrary code or cause a den CVE-2012-35624.3Opera before 12.00 Beta allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted web page that i CVE-2012-35635.0Opera before 12.00 Beta allows remote attackers to cause a denial of service (application crash) via a web page that contains invalid charac CVE-2012-35645.0Opera before 12.00 Beta allows remote attackers to cause a denial of service (application hang) via an absolutely positioned wrap=off TEXTAR