LiveActive security incident?Get immediate response
CVE Record

CVE-2012-2192: The socketpair function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.1.4-FP-25 SP-02 allows local users to cau...

The socketpair function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.1.4-FP-25 SP-02 allows local users to cause a denial of service (system crash) via a crafted application that leverages the presence of a socket on the free list.

UnknownCVSS not scoredNot KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's Takemoderate

Analyst readout for executives and security teams

Plain-English summary

This is a local denial-of-service flaw in IBM AIX and VIOS. A user who can run an application on an affected host may be able to crash the system. It is operationally important for legacy AIX environments, but the supplied sources do not show remote exploitation or active exploitation.

Executive priority

Treat as a legacy platform resilience issue. It is not shown as internet-exploitable, but a crash on critical AIX or VIOS infrastructure can cause business disruption. Prioritize based on system criticality and local user exposure.

Technical view

CVE-2012-2192 affects the socketpair function in IBM AIX 5.3, 6.1, 7.1 and VIOS 2.2.1.4-FP-25 SP-02. The CVE description says a crafted local application can trigger a system crash when a socket is present on the free list.

Likely exposure

Likely exposure is limited to systems running the IBM AIX and VIOS versions named in the CVE description. The bundle does not identify other products or platforms as affected.

Exploitation context

The bundle describes local-user exploitation for denial of service. It does not include evidence of active exploitation, KEV listing, remote attackability, privilege escalation, or confirmed public exploit status.

Researcher notes

Evidence is limited to the CVE description, IBM APAR/advisory references, and vulnerability database entries. No CVSS, CWE, detailed patch matrix, exploit status, or technical root-cause detail is included in the supplied bundle.

Mitigation direction

  • Review IBM socket advisory and referenced APARs for the applicable fix level.
  • Apply IBM-supported fixes or maintenance levels for affected AIX and VIOS systems.
  • Restrict untrusted local shell and application execution on exposed legacy hosts.
  • Prioritize highly available or business-critical AIX and VIOS workloads.
  • Check current IBM guidance if systems are unsupported or out of maintenance.

Validation and detection

  • Inventory AIX and VIOS hosts and compare versions against the CVE description.
  • Verify whether the relevant IBM APAR or advisory fix is installed.
  • Review system crash history for unexplained local denial-of-service symptoms.
  • Confirm local account and application execution controls on affected hosts.
  • Document residual exposure for unsupported legacy systems.
Prepared
Confidence
medium
Sources
8

Public sources used

Based on public source material and reviewed before publication.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2012-2192 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Unknown
CVSS
Not scored
Known Exploited
No
Published
Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors
0Timeline events
0ADP providers
10Source links

CVSS and timeline data

No CVSS vectors or timeline events were available in the normalized CVE source material.

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
n/an/an/aListed
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.