PT-2011-1081 · Linux+2 · Linux Kernel+3

Publicado 2011-03-01 · Atualizado 2020-07-27 · CVE-2011-2484

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel version 2.6.39.1 and earlier kernel-kdumppae (affected versions not specified)

Description The issue allows local users to cause a denial of service, consuming memory and CPU, and bypass the OOM Killer via a crafted application. Additionally, multiple vulnerabilities in the kernel-kdumppae package of SUSE Linux Enterprise may lead to disruption of protected information availability, potentially exploitable remotely.

Recommendations For Linux kernel version 2.6.39.1 and earlier: update to a version that prevents multiple registrations of exit handlers in the add del listener function. For kernel-kdumppae: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Enumeração de Fraquezas

CWE-20

CWE-399

Identificadores relacionados

BDU:2015-04607

CVE-2011-2484

DSA-2303-1

DSA-2310-1

RHSA-2011:1253

RHSA-2011:1350

RHSA-2011:1386

RHSA-2011_1350

RHSA-2011_1386

USN-1186-1

USN-1193-1

USN-1201-1

USN-1202-1

USN-1203-1

USN-1204-1

USN-1205-1

USN-1208-1

USN-1212-1

USN-1216-1

USN-1218-1

USN-1256-1

Produtos afetados

Linux Kernel

Red Hat

Suse

Kernel-Kdumppae

Referências · 30

• https://github.com/torvalds/linux/commit/982134ba62618c2d69fbbbd166d0a11ee3b7e3d8 · Nota
• https://github.com/torvalds/linux/commit/4ff67b720c02c36e54d55b88c2931879b7db1cd2 · Nota
• https://ubuntu.com/security/notices/USN-1201-1 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-1203-1 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-1256-1 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=715436 · Nota
• http://openwall.com/lists/oss-security/2011/06/22/2 · Correção
• http://lists.openwall.net/linux-kernel/2011/06/16/605 · Correção
• https://linux.oracle.com/errata/ELSA-2011-2029.html · Aviso do Fabricante
• http://groups.google.com/group/fa.linux.kernel/msg/4a28ecb7f755a88d?dmode=source · Nota
• https://suse.com/support/security/advisories/2011_34_kernel.html · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2011-2484 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/68150 · Nota
• https://ubuntu.com/security/notices/USN-1193-1 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-04607 · Nota de Segurança