PT-2011-2577 · Linux+1 · Linux Kernel+1

Publicado

2011-02-18

·

Atualizado

2024-06-15

·

CVE-2011-0712

CVSS v2.0

7.2

Alta

VetorAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.38-rc4-next-20110215
Description The issue is related to multiple buffer overflows in the caiaq Native Instruments USB audio functionality. This could potentially allow attackers to cause a denial of service or have other unspecified impacts via a long USB device name. The problem is associated with the snd usb caiaq audio init function in sound/usb/caiaq/audio.c and the snd usb caiaq midi init function in sound/usb/caiaq/midi.c.
Recommendations For Linux kernel versions prior to 2.6.38-rc4-next-20110215, update to version 2.6.38-rc4-next-20110215 or later to resolve the issue. As a temporary workaround, consider restricting the use of long USB device names to minimize the risk of exploitation.

Correção

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-120

Identificadores relacionados

CVE-2011-0712
DSA-2310-1
OPENSUSE-SU-2024:10128-1
RHSA-2011:0498
RHSA-2011_0498

Produtos afetados

Linux Kernel
Red Hat