PT-2012-1932 · Linux+2 · Linux Kernel+2

Bjoern B. Brandenburg · Publicado 2011-12-22 · Atualizado 2023-02-13 · CVE-2011-4621

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.37

Description The issue is related to a certain clock-update optimization that is not properly implemented, allowing local users to cause a denial of service, resulting in a system hang. This can be achieved by executing code in a loop within an application.

Recommendations For versions prior to 2.6.37, update to version 2.6.37 or later to resolve the issue.

Exploit

Correção

DoS

Infinite Loop

Enumeração de Fraquezas

CWE-835

Identificadores relacionados

CESA-2011_1849

CVE-2011-4621

RHSA-2011:1849

RHSA-2011_1849

Produtos afetados

Centos

Linux Kernel

Red Hat

Referências · 18

• 🔥 http://openwall.com/lists/oss-security/2011/12/21/6 · Exploit
• https://github.com/torvalds/linux/commit/ec8013beddd717d1740cfefb1a9b900deef85462 · Nota
• https://github.com/torvalds/linux/commit/0bfc96cb77224736dfa35c3c555d37b3646ef35e · Nota
• https://github.com/torvalds/linux/commit/f26f9aff6aaf67e9a430d16c266f91b13a5bff64 · Correção
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f26f9aff6aaf67e9a430d16c266f91b13a5bff64 · Nota
• https://lists.centos.org/pipermail/centos-announce/2011-December/055277.html · Nota
• http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37 · Nota
• https://access.redhat.com/errata/RHSA-2011:1849 · Nota
• https://lists.centos.org/pipermail/centos-announce/2011-December/030396.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4621 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2011-4621 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2011-4127 · Nota
• https://access.redhat.com/security/cve/CVE-2011-4621 · Nota
• https://rhn.redhat.com/errata/RHSA-2011-1849.html · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=769711 · Correção