PT-2012-1928 · Linux+2 · Linux Kernel+2

Maynard Johnson · Publicado 2012-03-06 · Atualizado 2023-02-13 · CVE-2011-4611

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.39 on powerpc platforms

Description The issue is related to an integer overflow in the perf event interrupt function, which can cause a denial of service due to an unhandled performance monitor exception. This occurs when certain outcomes of performance events are triggered.

Recommendations For Linux kernel versions prior to 2.6.39 on powerpc platforms, update to version 2.6.39 or later to resolve the issue.

Correção

DoS

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CESA-2012_0350

CVE-2011-4611

DSA-2389-1

RHSA-2012:0350

RHSA-2012_0350

Produtos afetados

Centos

Linux Kernel

Red Hat

Referências · 7

• https://github.com/torvalds/linux/commit/0837e3242c73566fc1c0196b4ec61779c25ffc93 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2011-4611 · Nota de Segurança
• http://openwall.com/lists/oss-security/2011/12/15/2 · Nota
• http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 · Nota
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0837e3242c73566fc1c0196b4ec61779c25ffc93 · Nota
• https://linux.oracle.com/errata/ELSA-2012-0350.html · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=767914 · Nota