CVE-2011-0712

Опубликовано: 18 фев. 2011

Источник: nvd

CVSS2: 7.2

EPSS Низкий

Описание

Multiple buffer overflows in the caiaq Native Instruments USB audio functionality in the Linux kernel before 2.6.38-rc4-next-20110215 might allow attackers to cause a denial of service or possibly have unspecified other impact via a long USB device name, related to (1) the snd_usb_caiaq_audio_init function in sound/usb/caiaq/audio.c and (2) the snd_usb_caiaq_midi_init function in sound/usb/caiaq/midi.c.

Ссылки

http://git.kernel.org/?p=linux/kernel/git/tiwai/sound-2.6.git%3Ba=commit%3Bh=eaae55dac6b64c0616046436b294e69fc5311581
http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.38-rc4-next-20110215.bz2
Broken Link
http://www.openwall.com/lists/oss-security/2011/02/16/11
Mailing List
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2011/02/16/12
Mailing List
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2011/02/16/5
Mailing List
Patch
Third Party Advisory
http://www.securityfocus.com/bid/46419
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-1146-1
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=677881
Issue Tracking
Patch
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/65461
Third Party Advisory
VDB Entry
http://git.kernel.org/?p=linux/kernel/git/tiwai/sound-2.6.git%3Ba=commit%3Bh=eaae55dac6b64c0616046436b294e69fc5311581
http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.38-rc4-next-20110215.bz2
Broken Link
http://www.openwall.com/lists/oss-security/2011/02/16/11
Mailing List
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2011/02/16/12
Mailing List
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2011/02/16/5
Mailing List
Patch
Third Party Advisory
http://www.securityfocus.com/bid/46419
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-1146-1
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=677881
Issue Tracking
Patch
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/65461
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 2.6.38 (исключая)

cpe:2.3:o:linux:linux_kernel:2.6.38:-:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:2.6.38:rc1:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:2.6.38:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:2.6.38:rc3:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*

EPSS

Процентиль: 18%

0.00056

Низкий

7.2 High

CVSS2

Дефекты

CWE-120

Связанные уязвимости

CVE-2011-0712

ubuntu

больше 14 лет назад

CVE-2011-0712

redhat

больше 14 лет назад

CVE-2011-0712

debian

больше 14 лет назад

Multiple buffer overflows in the caiaq Native Instruments USB audio fu ...

GHSA-6cqm-f49r-5r3x

github

около 3 лет назад

ELSA-2011-2015

oracle-oval

около 14 лет назад

ELSA-2011-2015: Oracle Linux 6 Unbreakable Enterprise kernel security fix update (IMPORTANT)

EPSS

Процентиль: 18%

0.00056

Низкий

7.2 High

CVSS2

Дефекты

CWE-120