CVE-2012-2319 describes multiple buffer overflow vulnerabilities within the HFS+ filesystem implementation of the Linux kernel prior to version 3.3.5. A local attacker could exploit these flaws by mounting a specially crafted HFS+ filesystem to gain elevated privileges on the affected system. This vulnerability carries a CVSS score of 7.2, indicating high severity with local access, low attack complexity, and complete impact on confidentiality, integrity, and availability. While no public exploit code or active exploitation has been observed, and community discussion is minimal, the potential for local privilege escalation remains.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 3.3.3CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:L/Au:N/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.5 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.