PT-2011-1071

CVE-2011-1017

·

تاريخ النشر

2011-03-01

·

تاريخ التحديث

2020-08-07

الوصف من

CVSS 2.0
7.8
عالية
المقاييسAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel version 2.6.37.2 and earlier kernel-kdumppae (affected versions not specified)
Description The issue is related to a heap-based buffer overflow in the ldm frag add function in the Linux kernel, which might allow local users to gain privileges or obtain sensitive information via a crafted LDM partition table. Additionally, there are multiple vulnerabilities in the kernel-kdumppae package of the SUSE Linux Enterprise operating system that can be exploited remotely, potentially leading to a disruption of protected information availability.
Recommendations For Linux kernel version 2.6.37.2 and earlier: update to a version that contains a fix for this issue. For kernel-kdumppae: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
DSA-2240-1
DSA-2264-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾