PT-2011-2918 · Linux+2 · Linux Kernel+2

Vasiliy Kulikov

·

Published

2011-05-19

·

Updated

2023-02-13

·

CVE-2011-1171

CVSS v2.0

2.1

Low

VectorAV:L/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.39
Description The issue allows local users to obtain potentially sensitive information from kernel memory by issuing a crafted request and then reading the argument to the resulting modprobe process. This is due to the failure of the IPv4 implementation to place the expected '0' character at the end of string data in certain structure members.
Recommendations For Linux kernel versions prior to 2.6.39, update to version 2.6.39 or later to resolve the issue.

Fix

Information Disclosure

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2011-1171
DSA-2240-1
DSA-2264-1
RHSA-2011:0500
RHSA-2011:0542
RHSA-2011:0833
RHSA-2011:0883
RHSA-2011_0542
RHSA-2011_0833
RHSA-2011_0883

Affected Products

Linux Kernel
Red Hat
Suse