Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2011-4127

Опубликовано: 03 июл. 2012
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 4.6

Описание

The Linux kernel before 3.2.2 does not properly restrict SG_IO ioctl calls, which allows local users to bypass intended restrictions on disk read and write operations by sending a SCSI command to (1) a partition block device or (2) an LVM volume.

РелизСтатусПримечание
devel

not-affected

4.4.0-21.37
esm-infra-legacy/trusty

not-affected

3.11.0-12.19
esm-infra/xenial

not-affected

4.2.0-16.19
hardy

ignored

end of life, was deferred
lucid

released

2.6.32-39.86
maverick

ignored

end of life
natty

ignored

end of life
oneiric

released

3.0.0-16.29
precise

not-affected

3.2.0-12.20
quantal

not-affected

3.4.0-1.1

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

hardy

DNE

lucid

DNE

natty

DNE

oneiric

DNE

precise

not-affected

3.2.0-1600.1
quantal

not-affected

3.2.0-1600.1
raring

DNE

saucy

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

hardy

DNE

lucid

released

2.6.32-343.45
maverick

ignored

end of life
natty

DNE

oneiric

DNE

precise

DNE

quantal

DNE

raring

DNE

Показывать по

РелизСтатусПримечание
devel

not-affected

3.4.0-3.15
esm-apps/xenial

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [3.4.0-1.3]]
lucid

DNE

precise

DNE

quantal

DNE

saucy

DNE

trusty

not-affected

3.4.0-1.3
trusty/esm

DNE

trusty was not-affected [3.4.0-1.3]
upstream

released

3.3~rc1

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

hardy

DNE

lucid

not-affected

no virtualisation on ARM
maverick

DNE

natty

DNE

oneiric

DNE

precise

DNE

quantal

DNE

raring

DNE

Показывать по

РелизСтатусПримечание
devel

not-affected

3.4.0-4.23
esm-apps/xenial

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [3.4.0-1.9]]
lucid

DNE

precise

DNE

quantal

DNE

saucy

ignored

trusty

not-affected

3.4.0-1.9
trusty/esm

DNE

trusty was not-affected [3.4.0-1.9]
upstream

released

3.3~rc1

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored [end of life]]
lucid

DNE

precise

DNE

quantal

DNE

saucy

ignored

trusty

ignored

end of standard support
trusty/esm

DNE

trusty was ignored [end of life]
upstream

released

3.3~rc1
utopic

ignored

end of life

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

hardy

DNE

lucid

ignored

end of life
maverick

DNE

natty

DNE

oneiric

DNE

precise

DNE

quantal

DNE

raring

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

hardy

DNE

lucid

ignored

end of life
maverick

DNE

natty

DNE

oneiric

DNE

precise

DNE

quantal

DNE

raring

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

hardy

DNE

lucid

released

3.0.0-16.29~lucid1
maverick

DNE

natty

DNE

oneiric

DNE

precise

DNE

quantal

DNE

raring

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

hardy

DNE

lucid

DNE

oneiric

DNE

precise

not-affected

3.5.0-18.29~precise1
quantal

DNE

raring

DNE

saucy

DNE

trusty

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

hardy

DNE

lucid

DNE

oneiric

DNE

precise

not-affected

3.8.0-19.30~precise1
quantal

DNE

raring

DNE

saucy

DNE

trusty

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

lucid

DNE

precise

not-affected

3.13.0-24.46~precise1
saucy

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

3.3~rc1
utopic

DNE

vivid

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [3.16.0-25.33~14.04.2]]
lucid

DNE

precise

DNE

trusty

not-affected

3.16.0-25.33~14.04.2
trusty/esm

DNE

trusty was not-affected [3.16.0-25.33~14.04.2]
upstream

released

3.3~rc1
utopic

DNE

vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [3.19.0-18.18~14.04.1]]
lucid

DNE

precise

DNE

trusty

not-affected

3.19.0-18.18~14.04.1
trusty/esm

DNE

trusty was not-affected [3.19.0-18.18~14.04.1]
upstream

released

3.3~rc1
utopic

DNE

vivid

DNE

vivid/stable-phone-overlay

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [4.2.0-18.22~14.04.1]]
precise

DNE

trusty

not-affected

4.2.0-18.22~14.04.1
trusty/esm

DNE

trusty was not-affected [4.2.0-18.22~14.04.1]
upstream

released

3.3~rc1
vivid

DNE

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

wily

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

not-affected

4.4.0-13.29~14.04.1
precise

DNE

trusty

not-affected

4.4.0-13.29~14.04.1
trusty/esm

not-affected

4.4.0-13.29~14.04.1
upstream

released

3.3~rc1
vivid

DNE

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

wily

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored [end of life]]
lucid

DNE

precise

DNE

quantal

DNE

saucy

ignored

trusty

ignored

end of standard support
trusty/esm

DNE

trusty was ignored [end of life]
upstream

released

3.3~rc1
utopic

DNE

Показывать по

РелизСтатусПримечание
devel

not-affected

3.4.0-5.34
esm-apps/xenial

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [3.4.0-3.21]]
lucid

DNE

precise

DNE

quantal

DNE

saucy

ignored

trusty

not-affected

3.4.0-3.21
trusty/esm

DNE

trusty was not-affected [3.4.0-3.21]
upstream

released

3.3~rc1

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [3.4.0-4.19]]
lucid

DNE

precise

DNE

quantal

DNE

saucy

ignored

trusty

not-affected

3.4.0-4.19
trusty/esm

DNE

trusty was not-affected [3.4.0-4.19]
upstream

released

3.3~rc1
utopic

not-affected

3.4.0-6.25

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

hardy

DNE

lucid

not-affected

no virtualisation on ARM
maverick

not-affected

no virtualisation on ARM
natty

DNE

oneiric

DNE

precise

DNE

quantal

DNE

raring

DNE

Показывать по

РелизСтатусПримечание
devel

not-affected

4.4.0-1009.10
esm-infra-legacy/trusty

DNE

precise

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

3.3~rc1
vivid

DNE

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

released

4.2.0-1014.21
wily

not-affected

4.2.0-1008.12

Показывать по

РелизСтатусПримечание
devel

not-affected

4.4.0-1012.12
esm-infra-legacy/trusty

DNE

precise

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

3.3~rc1
vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

wily

DNE

xenial

not-affected

4.4.0-1012.12

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

hardy

DNE

lucid

DNE

maverick

not-affected

no virtualisation on ARM
natty

not-affected

no virtualisation on ARM
oneiric

not-affected

no virtualisation on ARM
precise

not-affected

no virtualisation on ARM
quantal

not-affected

no virtualisation on ARM
raring

not-affected

no virtualisation on ARM

Показывать по

EPSS

Процентиль: 13%
0.00044
Низкий

4.6 Medium

CVSS2

Связанные уязвимости

redhat
больше 13 лет назад

The Linux kernel before 3.2.2 does not properly restrict SG_IO ioctl calls, which allows local users to bypass intended restrictions on disk read and write operations by sending a SCSI command to (1) a partition block device or (2) an LVM volume.

nvd
почти 13 лет назад

The Linux kernel before 3.2.2 does not properly restrict SG_IO ioctl calls, which allows local users to bypass intended restrictions on disk read and write operations by sending a SCSI command to (1) a partition block device or (2) an LVM volume.

debian
почти 13 лет назад

The Linux kernel before 3.2.2 does not properly restrict SG_IO ioctl c ...

github
около 3 лет назад

The Linux kernel before 3.2.2 does not properly restrict SG_IO ioctl calls, which allows local users to bypass intended restrictions on disk read and write operations by sending a SCSI command to (1) a partition block device or (2) an LVM volume.

oracle-oval
больше 13 лет назад

ELSA-2011-1849: kernel security and bug fix update (IMPORTANT)

EPSS

Процентиль: 13%
0.00044
Низкий

4.6 Medium

CVSS2

Уязвимость CVE-2011-4127