PT-2011-1071 · Linux+1 · Linux Kernel+1
Timo Warns
·
Published
2011-03-01
·
Updated
2020-08-07
·
CVE-2011-1017
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel version 2.6.37.2 and earlier
kernel-kdumppae (affected versions not specified)
Description
The issue is related to a heap-based buffer overflow in the
ldm frag add function in the Linux kernel, which might allow local users to gain privileges or obtain sensitive information via a crafted LDM partition table. Additionally, there are multiple vulnerabilities in the kernel-kdumppae package of the SUSE Linux Enterprise operating system that can be exploited remotely, potentially leading to a disruption of protected information availability.Recommendations
For Linux kernel version 2.6.37.2 and earlier: update to a version that contains a fix for this issue.
For kernel-kdumppae: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
RCE
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel
Kernel-Kdumppae