PT-2012-1507 · Linux+2 · Linux Kernel+2

Segoon + 1 · Publicado 2011-05-10 · Atualizado 2023-02-13 · CVE-2011-1080

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.39

Description The issue allows local users to obtain potentially sensitive information from kernel stack memory. This is possible because the do replace function in net/bridge/netfilter/ebtables.c does not ensure that a certain name field ends with a '0' character. A local user with the CAP NET ADMIN capability can replace a table and then read a modprobe command line to exploit this.

Recommendations For versions prior to 2.6.39, update to version 2.6.39 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2011-1080

DSA-2240-1

DSA-2264-1

OPENSUSE-SU-2012_0236-1

RHSA-2011:0498

RHSA-2011:0500

RHSA-2011:0833

RHSA-2011_0498

RHSA-2011_0833

Produtos afetados

Linux Kernel

Red Hat

Suse

Referências · 10

• https://github.com/torvalds/linux/commit/d846f71195d57b0bbb143382647c2c6638b04c5a · Nota
• http://openwall.com/lists/oss-security/2011/03/01/10 · Nota
• http://downloads.avaya.com/css/P8/documents/100145416 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-1080 · Nota de Segurança
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d846f71195d57b0bbb143382647c2c6638b04c5a · Nota
• http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 · Nota
• http://rhn.redhat.com/errata/RHSA-2011-0833.html · Aviso do Fabricante
• https://linux.oracle.com/errata/ELSA-2011-0498.html · Aviso do Fabricante
• https://linux.oracle.com/errata/ELSA-2011-2015.html · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=681262 · Nota