tocsin

Debian/linux: unknown

The main function in tools/hv/hv_kvp_daemon.c in hypervkvpd, as distributed in the Linux kernel before 3.4.5, does not validate the origin of Netlink messages, which allows local users to spoof Netlin

Action: Upgrade linux to 3.2.23-1 or later.

Affected

introducedfixedlast affected
03.2.23-1-

Fixed versions

3.2.23-1

Sources

published · modified · JSON