The igmp_heard_query function in net/ipv4/igmp.c in the Linux kernel before 3.2.1 allows remote attackers to cause a denial of service (div…

published 2012-05-17 14 y ago modified 2026-06-16 4 mo ago also EUVD-2012-0245

cvss: 7.5; version 3.1, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 20.3%; EPSS 20.3% chance of exploitation in 30 days, percentile 97%
public exploits: 1; Exploit-DB

The igmp_heard_query function in net/ipv4/igmp.c in the Linux kernel before 3.2.1 allows remote attackers to cause a denial of service (divide-by-zero error and panic) via IGMP packets.

Patch / fix

fixed in 1 distros 1 links 4

linux linux_kernel 3.0.17, 3.1.9, 3.2.1

kernel RHEL 6 2.6.32-220.7.1.el6
perf RHEL 6 2.6.32-220.7.1.el6
python-perf RHEL 6 2.6.32-220.7.1.el6
kernel-kdump RHEL 6 2.6.32-220.7.1.el6
kernel-firmware RHEL 6 2.6.32-220.7.1.el6
kernel-bootwrapper RHEL 6 2.6.32-220.7.1.el6
kernel-debuginfo-common-i686 RHEL 6 2.6.32-220.7.1.el6
kernel-debuginfo-common-ppc64 RHEL 6 2.6.32-220.7.1.el6

red hat advisories RHSA-2012:0350 RHSA-2012:0107 RHSA-2012:0422 RHSA-2012:0333

github.com/torvalds/linux@25c413a commit
github.com/torvalds/linux@a8c1f65 commit
kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.1 advisory
bugzilla.redhat.com/show_bug.cgi?id=772867 advisory

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2012-0207 updated 2026-11-05 cvss 6.1

kernel: igmp: Avoid zero delay when receiving odd mixture of IGMP queries

Red Hat Enterprise Linux (v. 5 server) kernel 2.6.18-274.18.1.el5, kernel-PAE 2.6.18-274.18.1.el5, kernel-xen 2.6.18-274.18.1.el5, kernel-kdump 2.6.18-274.18.1.el5, kernel-debuginfo-common 2.6.18-274.18.1.el5 Red Hat Enterprise Linux Desktop (v. 5 client) kernel 2.6.18-274.18.1.el5, kernel-PAE 2.6.18-274.18.1.el5, kernel-xen 2.6.18-274.18.1.el5, kernel-debuginfo-common 2.6.18-274.18.1.el5
fixed: vendor fix RHSA-2012:0107
Red Hat Enterprise Linux Desktop (v. 6) perf 2.6.32-220.7.1.el6, kernel 2.6.32-220.7.1.el6, kernel-firmware 2.6.32-220.7.1.el6, kernel-debuginfo-common-i686 2.6.32-220.7.1.el6, kernel-debuginfo-common-x86_64 2.6.32-220.7.1.el6 Red Hat Enterprise Linux Desktop Optional (v. 6) kernel 2.6.32-220.7.1.el6, python-perf 2.6.32-220.7.1.el6, kernel-debuginfo-common-i686 2.6.32-220.7.1.el6, kernel-debuginfo-common-x86_64 2.6.32-220.7.1.el6 Red Hat Enterprise Linux HPC Node (v. 6) perf 2.6.32-220.7.1.el6, kernel 2.6.32-220.7.1.el6, kernel-firmware 2.6.32-220.7.1.el6, kernel-debuginfo-common-x86_64 2.6.32-220.7.1.el6 Red Hat Enterprise Linux HPC Node Optional (v. 6) kernel 2.6.32-220.7.1.el6, python-perf 2.6.32-220.7.1.el6, kernel-debuginfo-common-x86_64 2.6.32-220.7.1.el6 Red Hat Enterprise Linux Server (v. 6) perf 2.6.32-220.7.1.el6, kernel 2.6.32-220.7.1.el6, kernel-kdump 2.6.32-220.7.1.el6, kernel-firmware 2.6.32-220.7.1.el6, kernel-bootwrapper 2.6.32-220.7.1.el6, kernel-debuginfo-common-i686 2.6.32-220.7.1.el6, +3 more Red Hat Enterprise Linux Server Optional (v. 6) kernel 2.6.32-220.7.1.el6, python-perf 2.6.32-220.7.1.el6, kernel-debuginfo-common-i686 2.6.32-220.7.1.el6, kernel-debuginfo-common-ppc64 2.6.32-220.7.1.el6, kernel-debuginfo-common-s390x 2.6.32-220.7.1.el6, kernel-debuginfo-common-x86_64 2.6.32-220.7.1.el6

+2 more productsfewer

Red Hat Enterprise Linux Workstation (v. 6) perf 2.6.32-220.7.1.el6, kernel 2.6.32-220.7.1.el6, kernel-firmware 2.6.32-220.7.1.el6, kernel-debuginfo-common-i686 2.6.32-220.7.1.el6, kernel-debuginfo-common-x86_64 2.6.32-220.7.1.el6 Red Hat Enterprise Linux Workstation Optional (v. 6) kernel 2.6.32-220.7.1.el6, python-perf 2.6.32-220.7.1.el6, kernel-debuginfo-common-i686 2.6.32-220.7.1.el6, kernel-debuginfo-common-x86_64 2.6.32-220.7.1.el6

fixed: vendor fix RHSA-2012:0350
Red Hat MRG Realtime for RHEL 6 Server v.2 kernel-rt 3.0.18-rt34.53.el6rt, kernel-rt-trace 3.0.18-rt34.53.el6rt, kernel-rt-vanilla 3.0.18-rt34.53.el6rt, kernel-rt-firmware 3.0.18-rt34.53.el6rt, kernel-rt-debuginfo-common-x86_64 3.0.18-rt34.53.el6rt
fixed: vendor fix RHSA-2012:0333
Red Hat RHEV Hypervisor for RHEL-6 rhev-hypervisor6 6.2-20120320.0.el6_2, rhev-hypervisor6-tools 6.2-20120320.0.el6_2
fixed: vendor fix RHSA-2012:0422
Red Hat Enterprise Linux 4 kernel
not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Timeline

2012-01-17 First public exploit (EDB-18378)
2012-05-17 Published

Exploit prediction

20.28% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

EDB-18378 Linux Kernel 2.6.36 IGMP - Remote Denial of Service dos, 2012-01-17
bugs.debian.org http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=654876 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
NVD	3.1	7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD	2.0	7.8	AV:N/AC:L/Au:N/C:N/I:N/A:C

Classification

Weakness

CWE-369 Divide By Zero

Technology feeds

Linux kernel rss critical rss

References

github.com /torvalds/linux/commit/25c413ad0029ea86008234be28aee33456e53e5b
patch, third-party-advisory
github.com /torvalds/linux/commit/a8c1f65c79cbbb2f7da782d4c9d15639a9b94b27
patch, third-party-advisory
kernel.org /pub/linux/kernel/v3.x/ChangeLog-3.2.1
mailing-list, patch, vendor-advisory
bugzilla.redhat.com /show_bug.cgi?id=772867
issue-tracking, patch, third-party-advisory
bugs.debian.org /cgi-bin/bugreport.cgi?bug=654876
exploit, mailing-list, third-party-advisory
openwall.com /lists/oss-security/2012/01/10/5
mailing-list, third-party-advisory
git.kernel.org /?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a8c1f65c79cbbb2f7da782d4c9d15639a9b94b27

Sources

CVE List CVE-2012-0207
NVD CVE-2012-0207

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary