libmnl 'mnl_nlmsg_portid_ok()' Function Local Security Bypass Vulnerability

Bugtraq ID:	72739
Class:	Design Error
CVE:	CVE-2012-6689
Remote:	No
Local:	Yes
Published:	Aug 16 2012 12:00AM
Updated:	Jul 15 2015 12:41AM
Credit:	Florian Weimer
Vulnerable:	Linux kernel 3.3.5 Linux kernel 3.3.4 Linux kernel 3.3.2 Linux kernel 3.2.13 Linux kernel 3.2.9 Linux kernel 3.2.1 Linux kernel 3.1.8 Linux kernel 3.0.5 Linux kernel 3.0.4 Linux kernel 3.0.2 Linux kernel 3.0.1 Linux kernel 2.6.39 Linux kernel 2.6.38 Linux kernel 2.6.37 Linux kernel 2.6.36 Linux kernel 2.6.35 Linux kernel 2.6.34 Linux kernel 2.6.33 Linux kernel 2.6.32 Linux kernel 2.6.31 Linux kernel 2.6.30 Linux kernel 2.6.29 Linux kernel 2.6.27 Linux kernel 2.6.26 Linux kernel 2.6.25 Linux kernel 2.6.24 Linux kernel 2.6.23 Linux kernel 2.6.22 Linux kernel 2.6.21 Linux kernel 2.6.20 Linux kernel 2.6.19 Linux kernel 2.6.17 Linux kernel 2.6.16 .18 Linux kernel 2.6.16 .17 Linux kernel 2.6.16 .16 Linux kernel 2.6.16 .15 Linux kernel 2.6.16 .14 Linux kernel 2.6.16 .12 Linux kernel 2.6.16 .11 Linux kernel 2.6.16 .10 Linux kernel 2.6.16 Linux kernel 2.6.15 Linux kernel 2.6.14 Linux kernel 2.6.13 Linux kernel 2.6.12 Linux kernel 2.6.11 + Red Hat Fedora Core4 Linux kernel 2.6.10 Linux kernel 2.6.3 Linux kernel 2.6.2 Linux kernel 2.6.1 Linux kernel 2.6 Linux kernel 3.2.2 Linux kernel 3.0.18 Linux kernel 3.0 Linux kernel 2.6.38.6 Linux kernel 2.6.38.4 Linux kernel 2.6.38.3 Linux kernel 2.6.38.2 Linux kernel 2.6.35.5 Linux kernel 2.6.35.4 Linux kernel 2.6.35.13 Linux kernel 2.6.35.1 Linux kernel 2.6.34.3 Linux kernel 2.6.34.2 Linux kernel 2.6.32.8 Linux kernel 2.6.32.7 Linux kernel 2.6.32.6 Linux kernel 2.6.32.5 Linux kernel 2.6.32.4 Linux kernel 2.6.32.3 Linux kernel 2.6.32.28 Linux kernel 2.6.32.22 Linux kernel 2.6.32.2 Linux kernel 2.6.32.18 Linux kernel 2.6.32.17 Linux kernel 2.6.32.16 Linux kernel 2.6.32.15 Linux kernel 2.6.32.14 Linux kernel 2.6.32.13 Linux kernel 2.6.32.12 Linux kernel 2.6.32.11 Linux kernel 2.6.32.10 Linux kernel 2.6.32.1 Linux kernel 2.6.31.6 Linux kernel 2.6.31.4 Linux kernel 2.6.31.1 + Trustix Secure Linux 2.0 Linux kernel 2.6.30.5 Linux kernel 2.6.30.4 Linux kernel 2.6.30.3 Linux kernel 2.6.27.49 Linux kernel 2.6.27.26 Linux kernel 2.6.26.1 Linux kernel 2.6.24.4 Linux kernel 2.6.24.3 Linux kernel 2.6.23.14 Linux kernel 2.6.23.10 Linux kernel 2.6.20.3 Linux kernel 2.6.20.2 Linux kernel 2.6.18 Linux kernel 2.6.15.5 Linux kernel 2.6.15.4 Linux kernel 2.6.15.11 Linux kernel 2.6.14.3 Linux kernel 2.6.14.2 Linux kernel 2.6.14.1 Linux kernel 2.6.13.4 Linux kernel 2.6.13.3 Linux kernel 2.6.13.2 Linux kernel 2.6.13.1 Linux kernel 2.6.12.6 Linux kernel 2.6.12.5 Linux kernel 2.6.12.4 Linux kernel 2.6.12.3 Linux kernel 2.6.12.2 Linux kernel 2.6.12.1 Linux kernel 2.6.11.8 Linux kernel 2.6.11.7 Linux kernel 2.6.11.6 Linux kernel 2.6.11.5 Linux kernel 2.6.11.4 Linux kernel 2.6.11.12 Linux kernel 2.6.11.11 AlienVault Open Source SIEM (OSSIM) 3.1
Not Vulnerable:

libmnl 'mnl_nlmsg_portid_ok()' Function Local Security Bypass Vulnerability

libmnl is prone to a local security-bypass vulnerability.

Attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions.

libmnl 1.0.3 and prior versions are vulnerable.

libmnl 'mnl_nlmsg_portid_ok()' Function Local Security Bypass Vulnerability

Attackers can exploit this issue using readily available tools.

libmnl 'mnl_nlmsg_portid_ok()' Function Local Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

libmnl 'mnl_nlmsg_portid_ok()' Function Local Security Bypass Vulnerability

References:

• Linux kernel Homepage (kernel.org)