CVE-2012-6703

High

Published: 29/06/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Integer overflow in the snd_compr_allocate_buffer function in the ALSA subsystem in the Linux kernel before version 3.6-rc6-next-20120917 may lead to insufficient memory allocation, resulting in denial of service.

Risk Assessment

Local users may exploit this vulnerability to cause denial of service or potentially other unspecified impacts.

Recommendation

It is recommended to update the Linux kernel to version 3.6-rc6-next-20120917 or later to mitigate this vulnerability.

Other vulnerabilities in Podsystem ALSA w jądrze Linux

CVE-2017-15265High
A race condition in the ALSA subsystem in Linux kernel before 4.13.8 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted /dev/snd/seq ioctl calls.

Original NVD description (English source)

Integer overflow in the snd_compr_allocate_buffer function in sound/core/compress_offload.c in the ALSA subsystem in the Linux kernel before 3.6-rc6-next-20120917 allows local users to cause a denial of service (insufficient memory allocation) or possibly have unspecified other impact via a crafted SNDRV_COMPRESS_SET_PARAMS ioctl call.