PT-2011-2813 · Linux · Linux Kernel

Timo Warns · Publicado 2011-03-01 · Atualizado 2023-02-13 · CVE-2011-1012

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.38-rc6-git6

Description The issue is related to the ldm parse vmdb function in the Linux kernel, which does not validate the VBLK size value in the VMDB structure in an LDM partition table. This allows local users to cause a denial of service, resulting in a divide-by-zero error and OOPS, via a crafted partition table.

Recommendations For Linux kernel versions prior to 2.6.38-rc6-git6, update to version 2.6.38-rc6-git6 or later to resolve the issue.

Correção

Divide By Zero

Enumeração de Fraquezas

CWE-369

Identificadores relacionados

CVE-2011-1012

DSA-2264-1

Produtos afetados

Linux Kernel

Referências · 12

• http://securityfocus.com/archive/1/516615/100/0/threaded · Nota
• http://kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.38-rc6-git6.log · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-1012 · Nota de Segurança
• http://securityreason.com/securityalert/8115 · Nota
• http://securitytracker.com/id?1025127 · Nota
• http://pre-cert.de/advisories/PRE-SA-2011-01.txt · Nota
• http://openwall.com/lists/oss-security/2011/02/23/4 · Correção
• http://openwall.com/lists/oss-security/2011/02/23/21 · Correção
• http://ubuntu.com/usn/USN-1146-1 · Aviso do Fabricante
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=294f6cf48666825d23c9372ef37631232746e40d · Nota
• http://spinics.net/lists/mm-commits/msg82429.html · Correção
• http://securityfocus.com/bid/46512 · Nota