CVE-2012-0194 : The TCP implementation in IBM AIX 5.3, 6.1, and 7.1, when the Large Send Offload

The TCP implementation in IBM AIX 5.3, 6.1, and 7.1, when the Large Send Offload option is enabled, allows remote attackers to cause a denial of service (assertion failure and panic) via an unspecified series of packets.

Published 2012-02-06 20:55:02

Updated 2017-08-29 01:30:52

Source IBM Corporation

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2012-0194

IBM » AIX » Version: 5.3
cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*
Matching versions
IBM » AIX » Version: 6.1
cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*
Matching versions
IBM » AIX » Version: 7.1
cpe:2.3:o:ibm:aix:7.1:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2012-0194

EPSS FAQ

4.39%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 92 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2012-0194

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.1	HIGH	AV:N/AC:M/Au:N/C:N/I:N/A:C	8.6	6.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete

References for CVE-2012-0194

http://www.ibm.com/support/docview.wss?uid=isg1IV13820

IBM IV13820: ASSERT IN TCP_OUTPUT DUE TO VERY SMALL MSS APPLIES TO AIX 6100-06
http://www.securityfocus.com/bid/51864

IBM AIX TCP Stack Denial of Service Vulnerability
http://www.ibm.com/support/docview.wss?uid=isg1IV13827

IBM IV13827: ASSERT IN TCP_OUTPUT DUE TO VERY SMALL MSS APPLIES TO AIX 5300-12
http://www.ibm.com/support/docview.wss?uid=isg1IV14210

IBM IV14210: ASSERT IN TCP_OUTPUT DUE TO VERY SMALL MSS APPLIES TO AIX 7100-00
http://www.ibm.com/support/docview.wss?uid=isg1IV14209

IBM IV14209: ASSERT IN TCP_OUTPUT DUE TO VERY SMALL MSS APPLIES TO AIX 6100-07
http://www.ibm.com/support/docview.wss?uid=isg1IV14211

IBM IV14211: ASSERT IN TCP_OUTPUT DUE TO VERY SMALL MSS APPLIES TO AIX 7100-01
http://aix.software.ibm.com/aix/efixes/security/large_send_advisory.asc

Patch;Vendor Advisory
http://securitytracker.com/id?1026640

IBM AIX TCP Large Send Offload Bug Lets Remote Users Deny Service - SecurityTracker
https://exchange.xforce.ibmcloud.com/vulnerabilities/72562

IBM AIX TCP stack denial of service CVE-2012-0194 Vulnerability Report
http://www.ibm.com/support/docview.wss?uid=isg1IV13751

IBM IV13751: ASSERT IN TCP_OUTPUT DUE TO VERY SMALL MSS APPLIES TO AIX 6100-05

Jump to

Vulnerability Details : CVE-2012-0194

Products affected by CVE-2012-0194

Exploit prediction scoring system (EPSS) score for CVE-2012-0194

CVSS scores for CVE-2012-0194

References for CVE-2012-0194