PT-2011-1073 · Linux+2 · Linux Kernel+3

·

CVE-2011-1494

·

Publicado

2011-03-01

·

Atualizado

2023-02-13

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel version 2.6.38 and earlier kernel-kdumppae (affected versions not specified)
Description The issue is related to an integer overflow in the Linux kernel, which might allow local users to gain privileges or cause a denial of service due to memory corruption. This can be triggered via an ioctl call with a crafted value, leading to a heap-based buffer overflow. Additionally, there are multiple vulnerabilities in the kernel-kdumppae package of SUSE Linux Enterprise that can be exploited remotely, potentially disrupting the availability of protected information.
Recommendations For Linux kernel version 2.6.38 and earlier: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For kernel-kdumppae: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2015-04607
CVE-2011-1494
DSA-2240-1
RHSA-2011:0542
RHSA-2011:0833
RHSA-2011:0883
RHSA-2011:1253
RHSA-2011_0542
RHSA-2011_0833
RHSA-2011_0883

Produtos afetados

Linux Kernel
Red Hat
Suse
Kernel-Kdumppae