CVE-2011-1163

Опубликовано: 10 апр. 2011

Источник: nvd

CVSS2: 2.1

EPSS Низкий

Описание

The osf_partition function in fs/partitions/osf.c in the Linux kernel before 2.6.38 does not properly handle an invalid number of partitions, which might allow local users to obtain potentially sensitive information from kernel heap memory via vectors related to partition-table parsing.

Ссылки

http://downloads.avaya.com/css/P8/documents/100145416
Third Party Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1eafbfeb7bdf59cfe173304c76188f3fd5f1fd05
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/03/15/14
Mailing List
Patch
Third Party Advisory
http://openwall.com/lists/oss-security/2011/03/15/9
Mailing List
Patch
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2011-0833.html
Third Party Advisory
http://securityreason.com/securityalert/8189
Third Party Advisory
http://securitytracker.com/id?1025225
Third Party Advisory
VDB Entry
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38
Broken Link
http://www.pre-cert.de/advisories/PRE-SA-2011-02.txt
Third Party Advisory
http://www.securityfocus.com/archive/1/517050
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/46878
Third Party Advisory
VDB Entry
http://www.spinics.net/lists/mm-commits/msg82737.html
Mailing List
Patch
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=688021
Issue Tracking
Patch
Third Party Advisory
http://downloads.avaya.com/css/P8/documents/100145416
Third Party Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1eafbfeb7bdf59cfe173304c76188f3fd5f1fd05
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/03/15/14
Mailing List
Patch
Third Party Advisory
http://openwall.com/lists/oss-security/2011/03/15/9
Mailing List
Patch
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2011-0833.html
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 2.6.38 (исключая)

Конфигурация 2

cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:ltss:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:5.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:5.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

EPSS

Процентиль: 30%

0.00108

Низкий

2.1 Low

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2011-1163

ubuntu

около 14 лет назад

CVE-2011-1163

redhat

больше 14 лет назад

CVE-2011-1163

debian

около 14 лет назад

The osf_partition function in fs/partitions/osf.c in the Linux kernel ...

GHSA-gmr9-4rwq-564r

github

около 3 лет назад

ELSA-2011-2016

oracle-oval

около 14 лет назад

ELSA-2011-2016: Unbreakable Enterprise kernel security fix update (IMPORTANT)

EPSS

Процентиль: 30%

0.00108

Низкий

2.1 Low

CVSS2

Дефекты

CWE-20