CVE-2011-2182

high
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

The ldm_frag_add function in fs/partitions/ldm.c in the Linux kernel before 2.6.39.1 does not properly handle memory allocation for non-initial fragments, which might allow local users to conduct buffer overflow attacks, and gain privileges or obtain sensitive information, via a crafted LDM partition table. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1017.

References

http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39.1

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=cae13fe4cc3f24820ffb990c09110626837e85d4

http://marc.info/?l=bugtraq&m=139447903326211&w=2

http://www.openwall.com/lists/oss-security/2011/06/05/1

http://www.securityfocus.com/bid/52334

https://github.com/torvalds/linux/commit/cae13fe4cc3f24820ffb990c09110626837e85d4

Details

Source: MITRE

Published: 2012-06-13

Updated: 2016-12-08

Type: CWE-119

Risk Information

CVSS v2

Base Score: 7.2

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Impact Score: 10

Exploitability Score: 3.9

Severity: HIGH

Tenable Plugins

View all (21 total)

IDNameProductFamilySeverity
75880openSUSE Security Update : kernel (openSUSE-SU-2011:0860-1)NessusSuSE Local Security Checks
high
75555openSUSE Security Update : kernel (openSUSE-SU-2011:0861-1)NessusSuSE Local Security Checks
high
68425Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2011-2037)NessusOracle Linux Local Security Checks
high
59159SuSE 10 Security Update : the Linux kernel (ZYPP Patch Number 7729)NessusSuSE Local Security Checks
critical
59158SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 7665)NessusSuSE Local Security Checks
high
58289USN-1394-1 : Linux kernel (OMAP4) vulnerabilitiesNessusUbuntu Local Security Checks
high
58288USN-1392-1 : linux-fsl-imx51 vulnerabilityNessusUbuntu Local Security Checks
high
58271Ubuntu 8.04 LTS : linux vulnerabilities (USN-1390-1)NessusUbuntu Local Security Checks
high
58264USN-1383-1 : linux-ti-omap4 vulnerabilitiesNessusUbuntu Local Security Checks
high
57665Ubuntu 10.10 : linux vulnerabilities (USN-1341-1)NessusUbuntu Local Security Checks
high
57535Ubuntu 10.04 LTS : linux-lts-backport-maverick vulnerabilities (USN-1332-1)NessusUbuntu Local Security Checks
high
57213SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 7666)NessusSuSE Local Security Checks
high
56768Ubuntu 10.04 LTS : linux-lts-backport-natty vulnerabilities (USN-1256-1)NessusUbuntu Local Security Checks
critical
56607SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 7734)NessusSuSE Local Security Checks
critical
56343Ubuntu 10.04 LTS : linux vulnerabilities (USN-1218-1)NessusUbuntu Local Security Checks
high
56305Ubuntu 10.04 LTS : linux-ec2 vulnerabilities (USN-1216-1)NessusUbuntu Local Security Checks
high
56207Ubuntu 10.10 : linux-mvl-dove vulnerabilities (USN-1208-1)NessusUbuntu Local Security Checks
high
56191Ubuntu 10.04 LTS : linux-mvl-dove vulnerabilities (USN-1203-1)NessusUbuntu Local Security Checks
high
55923Ubuntu 11.04 : linux vulnerabilities (USN-1193-1)NessusUbuntu Local Security Checks
high
55686SuSE 11.1 Security Update : Linux kernel (SAT Patch Numbers 4884 / 4888 / 4889)NessusSuSE Local Security Checks
high
55170Debian DSA-2264-1 : linux-2.6 - privilege escalation/denial of service/information leakNessusDebian Local Security Checks
high