{"id":"CVE-2012-6701","published":"2016-05-02T10:00:00Z","modified":"2024-08-06T21:36:01Z","title":"Integer overflow in fs/aio.c in the Linux kernel before 3.4.1 allows local users to cause a denial of service or…","vendor":null,"product":null,"tier":"tail","description":{"text":"Integer overflow in fs/aio.c in the Linux kernel before 3.4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large AIO iovec.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.00354,"percentile":0.28993,"provenance":"source"},"cwes":[],"references":[{"url":"https://github.com/torvalds/linux/commit/a70b52ec1aaeaf60f4739edb1b422827cb6f3893","tags":["x_refsource_CONFIRM"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1314288","tags":["x_refsource_CONFIRM"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1854","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a70b52ec1aaeaf60f4739edb1b422827cb6f3893","tags":["x_refsource_CONFIRM"]},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.1","tags":["x_refsource_CONFIRM"]},{"url":"http://www.openwall.com/lists/oss-security/2016/03/02/9","tags":["mailing-list","x_refsource_MLIST"]}],"priority":{"score":5.8,"factors":[{"name":"EPSS percentile","points":5.8}]},"euvd":{"id":"EUVD-2012-6543","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-cve-2012-6701-family-cve-2012-6701","children":[{"from":"CVE-2012-6701","to":"CVE-2015-8830","relation":"regression","confidence":"high","kind":"lineage","orderedBy":"description","evidence":[{"kind":"text","provenance":"source","relation":"regression","quote":"NOTE: this vulnerability exists because of a CVE-2012-6701 regression.","from":"CVE.org","in":"CVE-2015-8830"},{"kind":"same-code","provenance":"machine","files":["fs/aio.c"],"commits":["https://github.com/torvalds/linux/commit/a70b52ec1aaeaf60f4739edb1b422827cb6f3893","https://github.com/torvalds/linux/commit/4c185ce06dca14f5cea192f5a2c981ef50663f2b","https://github.com/torvalds/linux/commit/c4f4b82694fe48b02f7a881a1797131a6dad1364"],"basis":"shared function","functions":["kiocb"]}]},{"from":"CVE-2012-6701","to":"CVE-2016-10044","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["fs/aio.c"],"commits":["https://github.com/torvalds/linux/commit/a70b52ec1aaeaf60f4739edb1b422827cb6f3893","https://github.com/torvalds/linux/commit/22f6b4d34fcf039c63a94e7670e0da24f8575a5a"],"basis":"rarely changed file"}]}]}}