PT-2011-2919 · Linux+2 · Linux Kernel+2
Vasiliy Kulikov
·
Publicado
2011-05-19
·
Atualizado
2023-02-13
·
CVE-2011-1172
CVSS v2.0
2.1
Baixa
| Vetor | AV:L/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 2.6.39
Description
The issue is related to the IPv6 implementation in the Linux kernel, where the
net/ipv6/netfilter/ip6 tables.c file does not properly null-terminate string data in certain structure members. This allows local users with the CAP NET ADMIN capability to potentially obtain sensitive information from kernel memory by issuing a crafted request and then reading the argument to the resulting modprobe process.Recommendations
For Linux kernel versions prior to 2.6.39, update to version 2.6.39 or later to resolve the issue.
Correção
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Linux Kernel
Red Hat
Suse