PT-2011-2918 · Linux+2 · Linux Kernel+2

Vasiliy Kulikov

·

Publicado

2011-05-19

·

Atualizado

2023-02-13

·

CVE-2011-1171

CVSS v2.0

2.1

Baixa

VetorAV:L/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.39
Description The issue allows local users to obtain potentially sensitive information from kernel memory by issuing a crafted request and then reading the argument to the resulting modprobe process. This is due to the failure of the IPv4 implementation to place the expected '0' character at the end of string data in certain structure members.
Recommendations For Linux kernel versions prior to 2.6.39, update to version 2.6.39 or later to resolve the issue.

Correção

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2011-1171
DSA-2240-1
DSA-2264-1
RHSA-2011:0500
RHSA-2011:0542
RHSA-2011:0833
RHSA-2011:0883
RHSA-2011_0542
RHSA-2011_0833
RHSA-2011_0883

Produtos afetados

Linux Kernel
Red Hat
Suse