CVEvulnerability

CVE-2011-0712

7.2 HIGH Published 2011-02-18 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2011-02-18
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses: CWE-120

Description

Multiple buffer overflows in the caiaq Native Instruments USB audio functionality in the Linux kernel before 2.6.38-rc4-next-20110215 might allow attackers to cause a denial of service or possibly have unspecified other impact via a long USB device name, related to (1) the snd_usb_caiaq_audio_init function in sound/usb/caiaq/audio.c and (2) the snd_usb_caiaq_midi_init function in sound/usb/caiaq/midi.c.

Affected configurations

• linux linux kernel (< 2.6.38) • linux linux kernel 2.6.38 • canonical ubuntu linux 8.04

Related

Weakness · CWE (1)

CWE-120 Buffer Copy without Checking Size of Input weakness

Referenced by CWE · observed example (1)

CWE-676 Use of Potentially Dangerous Function weakness

References

http://git.kernel.org/?p=linux/kernel/git/tiwai/sound-2.6.git%3Ba=commit%3Bh=eaae55dac6b64c0616046436b294e69fc5311581 git.kernel.org
http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.38-rc4-next-20110215.bz2 Broken Link
http://www.openwall.com/lists/oss-security/2011/02/16/11 Mailing List, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2011/02/16/12 Mailing List, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2011/02/16/5 Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/46419 Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-1146-1 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=677881 Issue Tracking, Patch, Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/65461 Third Party Advisory, VDB Entry
http://git.kernel.org/?p=linux/kernel/git/tiwai/sound-2.6.git%3Ba=commit%3Bh=eaae55dac6b64c0616046436b294e69fc5311581 git.kernel.org
http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.38-rc4-next-20110215.bz2 Broken Link
http://www.openwall.com/lists/oss-security/2011/02/16/11 Mailing List, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2011/02/16/12 Mailing List, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2011/02/16/5 Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/46419 Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-1146-1 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=677881 Issue Tracking, Patch, Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/65461 Third Party Advisory, VDB Entry