CVE-2011-1479

medium
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

Double free vulnerability in the inotify subsystem in the Linux kernel before 2.6.39 allows local users to cause a denial of service (system crash) via vectors involving failed attempts to create files. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-4250.

References

http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=d0de4dc584ec6aa3b26fffea320a8457827768fc

http://www.openwall.com/lists/oss-security/2011/04/11/1

https://bugzilla.redhat.com/show_bug.cgi?id=691793

https://github.com/torvalds/linux/commit/d0de4dc584ec6aa3b26fffea320a8457827768fc

Details

Source: MITRE

Published: 2012-06-21

Updated: 2012-06-22

Type: CWE-399

Risk Information

CVSS v2

Base Score: 4.7

Vector: AV:L/AC:M/Au:N/C:N/I:N/A:C

Impact Score: 6.9

Exploitability Score: 3.4

Severity: MEDIUM

Tenable Plugins

View all (7 total)

IDNameProductFamilySeverity
76634RHEL 6 : MRG (RHSA-2011:1253)NessusRed Hat Local Security Checks
high
75880openSUSE Security Update : kernel (openSUSE-SU-2011:0860-1)NessusSuSE Local Security Checks
high
75555openSUSE Security Update : kernel (openSUSE-SU-2011:0861-1)NessusSuSE Local Security Checks
high
56768Ubuntu 10.04 LTS : linux-lts-backport-natty vulnerabilities (USN-1256-1)NessusUbuntu Local Security Checks
critical
56642Ubuntu 10.10 : linux vulnerabilities (USN-1243-1)NessusUbuntu Local Security Checks
medium
56641Ubuntu 10.04 LTS : linux-lts-backport-maverick vulnerabilities (USN-1242-1)NessusUbuntu Local Security Checks
medium
55591Ubuntu 11.04 : linux vulnerabilities (USN-1167-1)NessusUbuntu Local Security Checks
medium