CVE-2011-2498

Published: Feb 20, 2020Modified: Nov 21, 2024

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

The Linux kernel from v2.3.36 before v2.6.39 allows local unprivileged users to cause a denial of service (memory consumption) by triggering creation of PTE pages.

Affected (3)

Products: Linux: Linux Kernel · Canonical: Ubuntu Linux

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 2.3.36 to 2.6.39

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 11.04
Canonical Ubuntu Linux	Version 12.04

Related CWEs

CWE-772

Missing Release of Resource after Effective Lifetime

The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.

References (10)

http://marc.info/?l=oss-security&m=130923704824984&w=2

Source: secalert@redhat.com

Third Party Advisory

https://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-2498.html

Source: secalert@redhat.com

Third Party Advisory

https://security-tracker.debian.org/tracker/CVE-2011-2498

Source: secalert@redhat.com

Third Party Advisory

https://usn.ubuntu.com/1167-1/

Source: secalert@redhat.com

Third Party Advisory

https://www.rapid7.com/db/vulnerabilities/ubuntu-USN-1383-1

Source: secalert@redhat.com

Third Party Advisory

http://marc.info/?l=oss-security&m=130923704824984&w=2