CVE - CVE-2012-1583

CVE-ID
CVE-2012-1583	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Double free vulnerability in the xfrm6_tunnel_rcv function in net/ipv6/xfrm6_tunnel.c in the Linux kernel before 2.6.22, when the xfrm6_tunnel module is enabled, allows remote attackers to cause a denial of service (panic) via crafted IPv6 packets.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:1026930 URL:http://www.securitytracker.com/id?1026930 MISC:48881 URL:http://secunia.com/advisories/48881 MISC:53139 URL:http://www.securityfocus.com/bid/53139 MISC:HPSBMU02776 URL:http://marc.info/?l=bugtraq&m=133951357207000&w=2 MISC:RHSA-2012:0488 URL:http://rhn.redhat.com/errata/RHSA-2012-0488.html MISC:SSRT100852 URL:http://marc.info/?l=bugtraq&m=133951357207000&w=2 MISC:http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22 URL:http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22 MISC:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d0772b70faaf8e9f2013b6c4273d94d5eac8047a URL:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d0772b70faaf8e9f2013b6c4273d94d5eac8047a MISC:https://bugzilla.redhat.com/show_bug.cgi?id=752304 URL:https://bugzilla.redhat.com/show_bug.cgi?id=752304 MISC:https://github.com/torvalds/linux/commit/d0772b70faaf8e9f2013b6c4273d94d5eac8047a URL:https://github.com/torvalds/linux/commit/d0772b70faaf8e9f2013b6c4273d94d5eac8047a
Assigning CNA
Red Hat, Inc.
Date Record Created
20120312	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20120312)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)