CVE-2011-4914
6.4
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:P
Exploitability: 10.0 / Impact: 4.9
Source: NVD
Description
The ROSE protocol implementation in the Linux kernel before 2.6.39 does not verify that certain data-length values are consistent with the amount of data sent, which might allow remote attackers to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read) via crafted data to a ROSE socket.
Affected (18)
Products: Linux: Linux Kernel · Novell: Suse Linux Enterprise Server
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 2.6.38.8 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 10.0 sp4 |
References (12)
Source: secalert@redhat.com
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Source: secalert@redhat.com
Issue TrackingVDB Entry
Source: secalert@redhat.com
ExploitPatch
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatch
Timeline
No history available yet.