PT-2011-4187 · Linux+1 · Linux Kernel+1

Timo Warns · Publicado 2011-08-29 · Atualizado 2023-02-13 · CVE-2011-2928

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.1-rc3

Description The issue is related to the befs follow link function in fs/befs/linuxvfs.c, which does not validate the length attribute of long symlinks. This allows local users to cause a denial of service by accessing a long symlink on a malformed Be filesystem, resulting in an incorrect pointer dereference and OOPS.

Recommendations For Linux kernel versions prior to 3.1-rc3, update to version 3.1-rc3 or later to resolve the issue.

Exploit

Correção

DoS

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

CVE-2011-2928

DSA-2303-1

DSA-2310-1

SUSE-SU-2012_0736-1

Produtos afetados

Linux Kernel

Suse

Referências · 76

• 🔥 http://openwall.com/lists/oss-security/2011/08/19/5 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2011/08/19/1 · Exploit
• 🔥 http://pre-cert.de/advisories/PRE-SA-2011-06.txt · Exploit
• 🔥 http://securityfocus.com/archive/1/519387/100/0/threaded · Exploit
• 🔥 http://securityreason.com/securityalert/8360 · Exploit
• https://github.com/torvalds/linux/commit/1bb57e940e1958e40d51f2078f50c3a96a9b2d75 · Nota
• https://github.com/torvalds/linux/commit/dc0b027dfadfcb8a5504f7d8052754bf8d501ab9 · Nota
• https://bugzilla.novell.com/745640 · Nota
• https://bugzilla.novell.com/737899 · Nota
• http://lists.suse.com/mailman/listinfo/sle-security-updates · Nota
• https://bugzilla.novell.com/722400 · Nota
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=338d0f0a6fbc82407864606f5b64b75aeb3c70f2 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4077 · Nota de Segurança
• https://bugzilla.novell.com/731673 · Nota
• https://bugzilla.novell.com/745760 · Nota