PT-2011-1071

CVE-2011-1017

·

Publicado

2011-03-01

·

Atualizado

2020-08-07

Descrição por

CVSS 2.0
7.8
Alta
MétricasAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel version 2.6.37.2 and earlier kernel-kdumppae (affected versions not specified)
Description The issue is related to a heap-based buffer overflow in the ldm frag add function in the Linux kernel, which might allow local users to gain privileges or obtain sensitive information via a crafted LDM partition table. Additionally, there are multiple vulnerabilities in the kernel-kdumppae package of the SUSE Linux Enterprise operating system that can be exploited remotely, potentially leading to a disruption of protected information availability.
Recommendations For Linux kernel version 2.6.37.2 and earlier: update to a version that contains a fix for this issue. For kernel-kdumppae: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Explorabilidade
Exploit
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
DSA-2240-1
DSA-2264-1
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾