PT-2011-4187 · Linux+1 · Linux Kernel+1

Timo Warns · Published 2011-08-29 · Updated 2023-02-13 · CVE-2011-2928

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.1-rc3

Description The issue is related to the befs follow link function in fs/befs/linuxvfs.c, which does not validate the length attribute of long symlinks. This allows local users to cause a denial of service by accessing a long symlink on a malformed Be filesystem, resulting in an incorrect pointer dereference and OOPS.

Recommendations For Linux kernel versions prior to 3.1-rc3, update to version 3.1-rc3 or later to resolve the issue.

Exploit

Fix

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2011-2928

DSA-2303-1

DSA-2310-1

SUSE-SU-2012_0736-1

Affected Products

Linux Kernel

Suse

References · 76

• 🔥 http://openwall.com/lists/oss-security/2011/08/19/5 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2011/08/19/1 · Exploit
• 🔥 http://pre-cert.de/advisories/PRE-SA-2011-06.txt · Exploit
• 🔥 http://securityfocus.com/archive/1/519387/100/0/threaded · Exploit
• 🔥 http://securityreason.com/securityalert/8360 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4077 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4330 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2319 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4324 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2928 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2313 · Security Note
• https://bdu.fstec.ru/vul/2015-04359 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2011-2928 · Security Note
• https://github.com/torvalds/linux/commit/1bb57e940e1958e40d51f2078f50c3a96a9b2d75 · Note
• https://github.com/torvalds/linux/commit/dc0b027dfadfcb8a5504f7d8052754bf8d501ab9 · Note