PT-2011-2919 · Linux+2 · Linux Kernel+2

Vasiliy Kulikov

·

Published

2011-05-19

·

Updated

2023-02-13

·

CVE-2011-1172

CVSS v2.0

2.1

Low

VectorAV:L/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.39
Description The issue is related to the IPv6 implementation in the Linux kernel, where the net/ipv6/netfilter/ip6 tables.c file does not properly null-terminate string data in certain structure members. This allows local users with the CAP NET ADMIN capability to potentially obtain sensitive information from kernel memory by issuing a crafted request and then reading the argument to the resulting modprobe process.
Recommendations For Linux kernel versions prior to 2.6.39, update to version 2.6.39 or later to resolve the issue.

Fix

Information Disclosure

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2011-1172
DSA-2240-1
DSA-2264-1
RHSA-2011:0500
RHSA-2011:0542
RHSA-2011:0833
RHSA-2011:0883
RHSA-2011_0542
RHSA-2011_0833
RHSA-2011_0883

Affected Products

Linux Kernel
Red Hat
Suse