CVE-2011-0712high
New! CVE Severity Now Using CVSS v3
The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
Description
Multiple buffer overflows in the caiaq Native Instruments USB audio functionality in the Linux kernel before 2.6.38-rc4-next-20110215 might allow attackers to cause a denial of service or possibly have unspecified other impact via a long USB device name, related to (1) the snd_usb_caiaq_audio_init function in sound/usb/caiaq/audio.c and (2) the snd_usb_caiaq_midi_init function in sound/usb/caiaq/midi.c.
References
http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.38-rc4-next-20110215.bz2
http://www.openwall.com/lists/oss-security/2011/02/16/11
http://www.openwall.com/lists/oss-security/2011/02/16/12
http://www.openwall.com/lists/oss-security/2011/02/16/5
http://www.securityfocus.com/bid/46419
http://www.ubuntu.com/usn/USN-1146-1
Vulnerable Software
Configuration 1
OR
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.38:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.38:rc1:*:*:*:*:*:*
Configuration 2
OR
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 75879 | openSUSE Security Update : kernel (openSUSE-SU-2011:0416-1) | Nessus | SuSE Local Security Checks | high |
| 75554 | openSUSE Security Update : kernel (openSUSE-SU-2011:0399-1) | Nessus | SuSE Local Security Checks | high |
| 68416 | Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2011-2015) | Nessus | Oracle Linux Local Security Checks | high |
| 68273 | Oracle Linux 6 : kernel (ELSA-2011-0498) | Nessus | Oracle Linux Local Security Checks | high |
| 65103 | Ubuntu 10.04 LTS / 10.10 : linux-mvl-dove vulnerabilities (USN-1093-1) | Nessus | Ubuntu Local Security Checks | high |
| 61035 | Scientific Linux Security Update : kernel on SL6.x i386/x86_64 | Nessus | Scientific Linux Local Security Checks | high |
| 56285 | Debian DSA-2310-1 : linux-2.6 - privilege escalation/denial of service/information leak | Nessus | Debian Local Security Checks | medium |
| 56190 | USN-1202-1 : linux-ti-omap4 vulnerabilities | Nessus | Ubuntu Local Security Checks | high |
| 55785 | Ubuntu 10.04 LTS : linux-lts-backport-maverick vulnerabilities (USN-1187-1) | Nessus | Ubuntu Local Security Checks | high |
| 55591 | Ubuntu 11.04 : linux vulnerabilities (USN-1167-1) | Nessus | Ubuntu Local Security Checks | medium |
| 55530 | USN-1164-1 : linux-fsl-imx51 vulnerabilities | Nessus | Ubuntu Local Security Checks | high |
| 55454 | Ubuntu 10.10 : linux vulnerabilities (USN-1160-1) | Nessus | Ubuntu Local Security Checks | high |
| 55109 | Ubuntu 8.04 LTS : linux vulnerabilities (USN-1146-1) | Nessus | Ubuntu Local Security Checks | high |
| 55104 | Ubuntu 10.04 LTS : linux, linux-ec2 vulnerabilities (USN-1141-1) | Nessus | Ubuntu Local Security Checks | high |
| 53867 | RHEL 6 : kernel (RHSA-2011:0498) | Nessus | Red Hat Local Security Checks | high |
| 53740 | openSUSE Security Update : kernel (openSUSE-SU-2011:0346-1) | Nessus | SuSE Local Security Checks | high |
| 53571 | SuSE 11.1 Security Update : Linux kernel (SAT Patch Number 4376) | Nessus | SuSE Local Security Checks | high |
| 53570 | SuSE 11.1 Security Update : Linux kernel (SAT Patch Numbers 4384 / 4386) | Nessus | SuSE Local Security Checks | high |
| 52597 | SuSE 11.1 Security Update : Linux kernel (SAT Patch Numbers 4039 / 4042 / 4043) | Nessus | SuSE Local Security Checks | high |