PT-2012-1029 · Linux+3 · Linux Kernel+3

CVE-2011-4086

·

Publicado

2012-02-09

·

Atualizado

2023-02-13

CVSS v2.0

7.2

Alta

VetorAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.3.1 Linux (affected versions not specified)
Description The issue is related to the journal unmap buffer function in the Linux kernel, which does not properly handle certain buffer head states. This can be exploited by local users to cause a denial of service, resulting in a system crash, by leveraging the presence of an ext4 filesystem that was mounted with a journal. Additionally, there are multiple vulnerabilities in the Linux package that can lead to breaches of confidentiality, integrity, and availability of protected information.
Recommendations For Linux kernel versions prior to 3.3.1, update to version 3.3.1 or later to resolve the issue. At the moment, there is no information about a newer version that contains a fix for the multiple vulnerabilities in the Linux package.

Correção

DoS

Buffer Overflow

Resource Exhaustion

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2015-01796
CESA-2012_0571
CVE-2011-4086
DSA-2469-1
RHSA-2012:0107
RHSA-2012:0571
RHSA-2012:0670
RHSA-2012_0107
RHSA-2012_0571
USN-1431-1
USN-1432-1
USN-1433-1
USN-1440-1
USN-1445-1
USN-1446-1
USN-1453-1
USN-1454-1
USN-1458-1

Produtos afetados

Centos
Linux Kernel
Red Hat
Suse