CVE-2011-1182

Опубликовано: 01 мар. 2013

Источник: nvd

CVSS2: 3.6

EPSS Низкий

Описание

kernel/signal.c in the Linux kernel before 2.6.39 allows local users to spoof the uid and pid of a signal sender via a sigqueueinfo system call.

Ссылки

http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39
Third Party Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=da48524eb20662618854bb3df2db01fc65f3070c
http://rhn.redhat.com/errata/RHSA-2011-0927.html
Third Party Advisory
http://www.openwall.com/lists/oss-security/2011/03/23/2
Mailing List
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=690028
Issue Tracking
Third Party Advisory
https://github.com/torvalds/linux/commit/da48524eb20662618854bb3df2db01fc65f3070c
Exploit
Patch
Third Party Advisory
http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39
Third Party Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=da48524eb20662618854bb3df2db01fc65f3070c
http://rhn.redhat.com/errata/RHSA-2011-0927.html
Third Party Advisory
http://www.openwall.com/lists/oss-security/2011/03/23/2
Mailing List
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=690028
Issue Tracking
Third Party Advisory
https://github.com/torvalds/linux/commit/da48524eb20662618854bb3df2db01fc65f3070c
Exploit
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 2.6.39 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_aus:5.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:5.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*

EPSS

Процентиль: 18%

0.00059

Низкий

3.6 Low

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2011-1182

ubuntu

больше 12 лет назад

kernel/signal.c in the Linux kernel before 2.6.39 allows local users to spoof the uid and pid of a signal sender via a sigqueueinfo system call.

CVE-2011-1182

redhat

больше 14 лет назад

kernel/signal.c in the Linux kernel before 2.6.39 allows local users to spoof the uid and pid of a signal sender via a sigqueueinfo system call.

CVE-2011-1182

debian

больше 12 лет назад

kernel/signal.c in the Linux kernel before 2.6.39 allows local users t ...

GHSA-r2p8-xfjx-qrfg

github

около 3 лет назад

kernel/signal.c in the Linux kernel before 2.6.39 allows local users to spoof the uid and pid of a signal sender via a sigqueueinfo system call.

ELSA-2011-1189

oracle-oval

почти 14 лет назад

ELSA-2011-1189: kernel security, bug fix, and enhancement update (IMPORTANT)

EPSS

Процентиль: 18%

0.00059

Низкий

3.6 Low

CVSS2

Дефекты

NVD-CWE-noinfo