PT-2011-2577 · Linux+1 · Linux Kernel+1

Published 2011-02-18 · Updated 2024-06-15 · CVE-2011-0712

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.38-rc4-next-20110215

Description The issue is related to multiple buffer overflows in the caiaq Native Instruments USB audio functionality. This could potentially allow attackers to cause a denial of service or have other unspecified impacts via a long USB device name. The problem is associated with the snd usb caiaq audio init function in sound/usb/caiaq/audio.c and the snd usb caiaq midi init function in sound/usb/caiaq/midi.c.

Recommendations For Linux kernel versions prior to 2.6.38-rc4-next-20110215, update to version 2.6.38-rc4-next-20110215 or later to resolve the issue. As a temporary workaround, consider restricting the use of long USB device names to minimize the risk of exploitation.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2011-0712

DSA-2310-1

OPENSUSE-SU-2024:10128-1

RHSA-2011:0498

RHSA-2011_0498

Affected Products

Linux Kernel

Red Hat

References · 116

• http://openwall.com/lists/oss-security/2011/02/16/12 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2024:10128-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-0712 · Security Note
• http://openwall.com/lists/oss-security/2011/02/16/11 · Patch
• https://bdu.fstec.ru/vul/2015-04607 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=677881 · Patch
• https://linux.oracle.com/errata/ELSA-2011-0498.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2011-2015.html · Vendor Advisory
• http://openwall.com/lists/oss-security/2011/02/16/5 · Patch
• http://ubuntu.com/usn/USN-1146-1 · Vendor Advisory
• https://github.com/torvalds/linux/commit/8909c9ad8ff03611c9c96c9a92656213e4bb495b · Note
• https://suse.com/security/cve/CVE-2016-3713 · Note
• https://suse.com/security/cve/CVE-2010-2066 · Note
• https://suse.com/security/cve/CVE-2016-7039 · Note
• https://suse.com/security/cve/CVE-2016-2186 · Note