PT-2011-1082 · Linux+2 · Linux Kernel+3

Vasily Averin · Publicado 2011-03-01 · Atualizado 2023-02-13 · CVE-2011-2491

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.0 kernel-kdumppae (affected versions not specified)

Description The issue allows local users to cause a denial of service, resulting in a system hang, via a specific system call. Additionally, multiple vulnerabilities in the kernel-kdumppae package of the SUSE Linux Enterprise operating system can lead to disruption of protected information availability, and these vulnerabilities can be exploited remotely.

Recommendations For Linux kernel versions prior to 3.0, update to version 3.0 or later to resolve the issue. For kernel-kdumppae, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

RCE

Enumeração de Fraquezas

CWE-400

CWE-20

Identificadores relacionados

BDU:2015-04607

CVE-2011-2491

DSA-2303-1

DSA-2310-1

RHSA-2011:1189

RHSA-2011:1212

RHSA-2011:1253

RHSA-2011:1813

RHSA-2011_1189

RHSA-2011_1212

USN-1244-1

USN-1268-1

USN-1269-1

USN-1271-1

USN-1272-1

USN-1274-1

USN-1278-1

USN-1279-1

USN-1281-1

USN-1285-1

USN-1286-1

Produtos afetados

Linux Kernel

Red Hat

Suse Linux Enterprise

Kernel-Kdumppae

Referências · 30

• https://github.com/torvalds/linux/commit/982134ba62618c2d69fbbbd166d0a11ee3b7e3d8 · Nota
• https://github.com/torvalds/linux/commit/4ff67b720c02c36e54d55b88c2931879b7db1cd2 · Nota
• https://github.com/torvalds/linux/commit/0b760113a3a155269a3fba93a409c640031dd68f · Correção
• https://rhn.redhat.com/errata/RHSA-2011-1212.html · Nota
• https://ubuntu.com/security/notices/USN-1286-1 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2011-2491 · Nota de Segurança
• https://ubuntu.com/security/CVE-2011-2491 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-1244-1 · Aviso do Fabricante
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0b760113a3a155269a3fba93a409c640031dd68f · Nota
• https://ubuntu.com/security/notices/USN-1278-1 · Aviso do Fabricante
• http://groups.google.com/group/fa.linux.kernel/msg/4a28ecb7f755a88d?dmode=source · Nota
• https://suse.com/support/security/advisories/2011_34_kernel.html · Nota
• https://ubuntu.com/security/notices/USN-1279-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2011-2491 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=709393 · Correção