CVE-2012-3364

Published: 2 July 2012

Multiple stack-based buffer overflows in the Near Field Communication Controller Interface (NCI) in the Linux kernel before 3.4.5 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via incoming frames with crafted length fields.

From the Ubuntu security team

Dan Rosenberg discovered flaws in the Linux kernel's NCI (Near Field Communication Controller Interface). A remote attacker could exploit these flaws to crash the system or potentially execute privileged code.

Notes

linux-armadaxp is maintained by OEM

NFC did not exist before 3e256b8f8dfa309a80b5dece388d85d9a9801a29

Status

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3364
• http://marc.info/?l=linux-kernel&m=134030878917784&w=2
• https://ubuntu.com/security/notices/USN-1529-1
• https://ubuntu.com/security/notices/USN-1514-1
• NVD
• Launchpad
• Debian

Bugs

• https://launchpad.net/bugs/1020101