CVE-2011-1173

medium
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

The econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.39 on the x86_64 platform allows remote attackers to obtain potentially sensitive information from kernel stack memory by reading uninitialized data in the ah field of an Acorn Universal Networking (AUN) packet.

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=67c5c6cb8129c595f21e88254a3fc6b3b841ae8e

http://marc.info/?l=linux-netdev&m=130036203528021&w=2

http://securityreason.com/securityalert/8279

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39

http://www.openwall.com/lists/oss-security/2011/03/18/15

http://www.openwall.com/lists/oss-security/2011/03/21/1

http://www.openwall.com/lists/oss-security/2011/03/21/4

https://bugzilla.redhat.com/show_bug.cgi?id=591815#c14

Details

Source: MITRE

Published: 2011-06-22

Updated: 2020-07-29

Type: CWE-200

Risk Information

CVSS v2

Base Score: 5

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Impact Score: 2.9

Exploitability Score: 10

Severity: MEDIUM

Vulnerable Software

Configuration 1

OR

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Tenable Plugins

View all (18 total)

IDNameProductFamilySeverity
75882openSUSE Security Update : kernel (openSUSE-SU-2012:0236-1)NessusSuSE Local Security Checks
high
74801openSUSE Security Update : kernel (openSUSE-SU-2012:1439-1)NessusSuSE Local Security Checks
critical
74658openSUSE Security Update : Kernel (openSUSE-SU-2012:0799-1)NessusSuSE Local Security Checks
critical
59161SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 7915)NessusSuSE Local Security Checks
high
57659SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 7918)NessusSuSE Local Security Checks
high
56257USN-1212-1 : linux-ti-omap4 vulnerabilitiesNessusUbuntu Local Security Checks
high
56192USN-1204-1 : linux-fsl-imx51 vulnerabilitiesNessusUbuntu Local Security Checks
high
56190USN-1202-1 : linux-ti-omap4 vulnerabilitiesNessusUbuntu Local Security Checks
high
55785Ubuntu 10.04 LTS : linux-lts-backport-maverick vulnerabilities (USN-1187-1)NessusUbuntu Local Security Checks
high
55784Ubuntu 8.04 LTS : linux vulnerabilities (USN-1186-1)NessusUbuntu Local Security Checks
medium
55686SuSE 11.1 Security Update : Linux kernel (SAT Patch Numbers 4884 / 4888 / 4889)NessusSuSE Local Security Checks
high
55591Ubuntu 11.04 : linux vulnerabilities (USN-1167-1)NessusUbuntu Local Security Checks
medium
55589Ubuntu 10.10 : linux-mvl-dove vulnerabilities (USN-1159-1)NessusUbuntu Local Security Checks
high
55521Ubuntu 10.04 LTS : linux-mvl-dove vulnerabilities (USN-1162-1)NessusUbuntu Local Security Checks
high
55454Ubuntu 10.10 : linux vulnerabilities (USN-1160-1)NessusUbuntu Local Security Checks
high
55170Debian DSA-2264-1 : linux-2.6 - privilege escalation/denial of service/information leakNessusDebian Local Security Checks
high
55104Ubuntu 10.04 LTS : linux, linux-ec2 vulnerabilities (USN-1141-1)NessusUbuntu Local Security Checks
high
55028Debian DSA-2240-1 : linux-2.6 - privilege escalation/denial of service/information leakNessusDebian Local Security Checks
high