CVE-2012-2319
Multiple buffer overflows in the hfsplus filesystem implementation in the Linux kernel before 3.3...
7.2 HighFix available
Multiple buffer overflows in the hfsplus filesystem implementation in the Linux kernel before 3.3.5 allow local users to gain privileges via a crafted HFS plus filesystem, a related issue to CVE-2009-4020.
Exploit likelihood
0.40%Down 0.9 points since Feb 4, 2022
What each source reports
NVD Score used
Multiple buffer overflows in the hfsplus filesystem implementation in the Linux kernel before 3.3.5 allow local users to gain privileges via a crafted HFS plus filesystem, a related issue to CVE-2009-4020.
- Record
CVE-2012-2319- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in the hfsplus filesystem implementation in the Linux kernel before 3.3.5 allow local users to gain privileges via a crafted HFS plus filesystem, a related issue to CVE-2009-4020.
- Record
CVE-2012-2319- Updated
- 2026-11-02
EUVDEUVD-2012-2312 No score
Multiple buffer overflows in the hfsplus filesystem implementation in the Linux kernel before 3.3.5 allow local users to gain privileges via a crafted HFS plus filesystem, a related issue to CVE-2009-4020.
- Record
EUVD-2012-2312- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9w77-vr2w-558v No score
Multiple buffer overflows in the hfsplus filesystem implementation in the Linux kernel before 3.3...
Multiple buffer overflows in the hfsplus filesystem implementation in the Linux kernel before 3.3.5 allow local users to gain privileges via a crafted HFS plus filesystem, a related issue to CVE-2009-4020.
- Record
GHSA-9w77-vr2w-558v- Updated
- 2026-11-02
OSV No score
Multiple buffer overflows in the hfsplus filesystem implementation in the Linux kernel before 3.3.5 allow local users to gain privileges via a crafted HFS plus filesystem, a related issue to CVE-2009-4020.
- Record
CVE-2012-2319- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-2319 No score
Multiple buffer overflows in the hfsplus filesystem implementation in the Linux kernel before 3.3.5 allow local users to gain privileges via a crafted HFS plus filesystem, a related issue to CVE-2009-4020.
- Record
DEBIAN-CVE-2012-2319- Updated
- 2026-11-02
OSVSUSE-SU-2015:0481-1 No score
Security update for Linux kernel
The SUSE Linux Enterprise 11 Service Pack 2 kernel was updated to fix a regression introduced by the previous update:
* scsi_dh_alua: Incorrect reference counting in the SCSI ALUA
initialization code lead to system crashes on boot (bnc#858831).
As the update introducing the regression was marked security, this is also marked security even though this bug is not security relevant.
- Record
SUSE-SU-2015:0481-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2012-2319 No score
Multiple buffer overflows in the hfsplus filesystem implementation in the Linux kernel before 3.3.5 allow local users to gain privileges via a crafted HFS plus filesystem, a related issue to CVE-2009-4020.
- Record
UBUNTU-CVE-2012-2319- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linuxDebian:12 |
before 3.2.17-1 | 3.2.17-1 |
linuxDebian:13 |
before 3.2.17-1 | 3.2.17-1 |
linuxDebian:14 |
before 3.2.17-1 | 3.2.17-1 |
kernelRed Hat:enterprise_linux:5::client |
before 0:2.6.18-308.16.1.el5 | 0:2.6.18-308.16.1.el5 |
kernel-PAERed Hat:enterprise_linux:5::client |
before 0:2.6.18-308.16.1.el5 | 0:2.6.18-308.16.1.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.6.18-308.16.1.el5 | 0:2.6.18-308.16.1.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::client |
before 0:2.6.18-308.16.1.el5 | 0:2.6.18-308.16.1.el5 |
kernel-debugRed Hat:enterprise_linux:5::client |
before 0:2.6.18-308.16.1.el5 | 0:2.6.18-308.16.1.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.6.18-308.16.1.el5 | 0:2.6.18-308.16.1.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::client |
before 0:2.6.18-308.16.1.el5 | 0:2.6.18-308.16.1.el5 |
Show 44 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.6.18-308.16.1.el5 | 0:2.6.18-308.16.1.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::client |
before 0:2.6.18-308.16.1.el5 | 0:2.6.18-308.16.1.el5 |
kernel-develRed Hat:enterprise_linux:5::client |
before 0:2.6.18-308.16.1.el5 | 0:2.6.18-308.16.1.el5 |
kernel-docRed Hat:enterprise_linux:5::client |
before 0:2.6.18-308.16.1.el5 | 0:2.6.18-308.16.1.el5 |
kernel-headersRed Hat:enterprise_linux:5::client |
before 0:2.6.18-308.16.1.el5 | 0:2.6.18-308.16.1.el5 |
kernel-xenRed Hat:enterprise_linux:5::client |
before 0:2.6.18-308.16.1.el5 | 0:2.6.18-308.16.1.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.6.18-308.16.1.el5 | 0:2.6.18-308.16.1.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::client |
before 0:2.6.18-308.16.1.el5 | 0:2.6.18-308.16.1.el5 |
kernelRed Hat:enterprise_linux:5::server |
before 0:2.6.18-308.16.1.el5 | 0:2.6.18-308.16.1.el5 |
kernel-PAERed Hat:enterprise_linux:5::server |
before 0:2.6.18-308.16.1.el5 | 0:2.6.18-308.16.1.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.6.18-308.16.1.el5 | 0:2.6.18-308.16.1.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::server |
before 0:2.6.18-308.16.1.el5 | 0:2.6.18-308.16.1.el5 |
kernel-debugRed Hat:enterprise_linux:5::server |
before 0:2.6.18-308.16.1.el5 | 0:2.6.18-308.16.1.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.6.18-308.16.1.el5 | 0:2.6.18-308.16.1.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::server |
before 0:2.6.18-308.16.1.el5 | 0:2.6.18-308.16.1.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.6.18-308.16.1.el5 | 0:2.6.18-308.16.1.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::server |
before 0:2.6.18-308.16.1.el5 | 0:2.6.18-308.16.1.el5 |
kernel-develRed Hat:enterprise_linux:5::server |
before 0:2.6.18-308.16.1.el5 | 0:2.6.18-308.16.1.el5 |
kernel-docRed Hat:enterprise_linux:5::server |
before 0:2.6.18-308.16.1.el5 | 0:2.6.18-308.16.1.el5 |
kernel-headersRed Hat:enterprise_linux:5::server |
before 0:2.6.18-308.16.1.el5 | 0:2.6.18-308.16.1.el5 |
kernel-kdumpRed Hat:enterprise_linux:5::server |
before 0:2.6.18-308.16.1.el5 | 0:2.6.18-308.16.1.el5 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.6.18-308.16.1.el5 | 0:2.6.18-308.16.1.el5 |
kernel-kdump-develRed Hat:enterprise_linux:5::server |
before 0:2.6.18-308.16.1.el5 | 0:2.6.18-308.16.1.el5 |
kernel-xenRed Hat:enterprise_linux:5::server |
before 0:2.6.18-308.16.1.el5 | 0:2.6.18-308.16.1.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.6.18-308.16.1.el5 | 0:2.6.18-308.16.1.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::server |
before 0:2.6.18-308.16.1.el5 | 0:2.6.18-308.16.1.el5 |
kernelRed Hat:rhel_eus:5.6 |
before 0:2.6.18-238.45.1.el5 | 0:2.6.18-238.45.1.el5 |
kernel-PAERed Hat:rhel_eus:5.6 |
before 0:2.6.18-238.45.1.el5 | 0:2.6.18-238.45.1.el5 |
kernel-PAE-debuginfoRed Hat:rhel_eus:5.6 |
before 0:2.6.18-238.45.1.el5 | 0:2.6.18-238.45.1.el5 |
kernel-PAE-develRed Hat:rhel_eus:5.6 |
before 0:2.6.18-238.45.1.el5 | 0:2.6.18-238.45.1.el5 |
kernel-debugRed Hat:rhel_eus:5.6 |
before 0:2.6.18-238.45.1.el5 | 0:2.6.18-238.45.1.el5 |
kernel-debug-debuginfoRed Hat:rhel_eus:5.6 |
before 0:2.6.18-238.45.1.el5 | 0:2.6.18-238.45.1.el5 |
kernel-debug-develRed Hat:rhel_eus:5.6 |
before 0:2.6.18-238.45.1.el5 | 0:2.6.18-238.45.1.el5 |
kernel-debuginfoRed Hat:rhel_eus:5.6 |
before 0:2.6.18-238.45.1.el5 | 0:2.6.18-238.45.1.el5 |
kernel-debuginfo-commonRed Hat:rhel_eus:5.6 |
before 0:2.6.18-238.45.1.el5 | 0:2.6.18-238.45.1.el5 |
kernel-develRed Hat:rhel_eus:5.6 |
before 0:2.6.18-238.45.1.el5 | 0:2.6.18-238.45.1.el5 |
kernel-docRed Hat:rhel_eus:5.6 |
before 0:2.6.18-238.45.1.el5 | 0:2.6.18-238.45.1.el5 |
kernel-headersRed Hat:rhel_eus:5.6 |
before 0:2.6.18-238.45.1.el5 | 0:2.6.18-238.45.1.el5 |
kernel-kdumpRed Hat:rhel_eus:5.6 |
before 0:2.6.18-238.45.1.el5 | 0:2.6.18-238.45.1.el5 |
kernel-kdump-debuginfoRed Hat:rhel_eus:5.6 |
before 0:2.6.18-238.45.1.el5 | 0:2.6.18-238.45.1.el5 |
kernel-kdump-develRed Hat:rhel_eus:5.6 |
before 0:2.6.18-238.45.1.el5 | 0:2.6.18-238.45.1.el5 |
kernel-xenRed Hat:rhel_eus:5.6 |
before 0:2.6.18-238.45.1.el5 | 0:2.6.18-238.45.1.el5 |
kernel-xen-debuginfoRed Hat:rhel_eus:5.6 |
before 0:2.6.18-238.45.1.el5 | 0:2.6.18-238.45.1.el5 |
kernel-xen-develRed Hat:rhel_eus:5.6 |
before 0:2.6.18-238.45.1.el5 | 0:2.6.18-238.45.1.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-2319 is a high vulnerability (CVSS 7.2) in Linux Kernel, published May 17, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.40%, the 34th percentile. Fixed in linux 3.2.17-1.
References
secunia.com/advisories/50811
openwall.com/lists/oss-security/2012/05/07/11
rhn.redhat.com/errata/RHSA-2012-1323.html
bugzilla.redhat.com/show_bug.cgi?id=819471
kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.5
Show 194 moreShow less
github.com/torvalds/linux/commit/6f24f892871acc47b40dd594c63606a17c714f77
lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6f24f892871acc47b40dd594c63606a17c714f77
nvd.nist.gov/vuln/detail/CVE-2012-2319
access.redhat.com/errata/RHSA-2012:1323
security-tracker.debian.org/tracker/CVE-2012-2319
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1323.json
cve.org/CVERecord?id=CVE-2012-2319
suse.com/support/update/announcement/2015/suse-su-20150481-1
bugzilla.suse.com/556135
ubuntu.com/security/CVE-2012-2319
This page doesn't list everything
Left out here: 857 references. The JSON record has them.