CVEvulnerability
CVE-2011-1163
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2011-04-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-20
Description
The osf_partition function in fs/partitions/osf.c in the Linux kernel before 2.6.38 does not properly handle an invalid number of partitions, which might allow local users to obtain potentially sensitive information from kernel heap memory via vectors related to partition-table parsing.
Affected configurations
• linux linux kernel (< 2.6.38)
• suse linux enterprise server 10
• redhat enterprise linux desktop 5.0
• redhat enterprise linux desktop 6.0
• redhat enterprise linux eus 5.6
• redhat enterprise linux server 5.0
• redhat enterprise linux server 6.0
• redhat enterprise linux server aus 5.6
• redhat enterprise linux workstation 5.0
• redhat enterprise linux workstation 6.0
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://downloads.avaya.com/css/P8/documents/100145416 Third Party Advisory
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1eafbfeb7bdf59cfe173304c76188f3fd5f1fd05 git.kernel.org
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html Mailing List, Third Party Advisory
- http://openwall.com/lists/oss-security/2011/03/15/14 Mailing List, Patch, Third Party Advisory
- http://openwall.com/lists/oss-security/2011/03/15/9 Mailing List, Patch, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2011-0833.html Third Party Advisory
- http://securityreason.com/securityalert/8189 Third Party Advisory
- http://securitytracker.com/id?1025225 Third Party Advisory, VDB Entry
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38 Broken Link
- http://www.pre-cert.de/advisories/PRE-SA-2011-02.txt Third Party Advisory
- http://www.securityfocus.com/archive/1/517050 Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/46878 Third Party Advisory, VDB Entry
- http://www.spinics.net/lists/mm-commits/msg82737.html Mailing List, Patch, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=688021 Issue Tracking, Patch, Third Party Advisory
- http://downloads.avaya.com/css/P8/documents/100145416 Third Party Advisory
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1eafbfeb7bdf59cfe173304c76188f3fd5f1fd05 git.kernel.org
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html Mailing List, Third Party Advisory
- http://openwall.com/lists/oss-security/2011/03/15/14 Mailing List, Patch, Third Party Advisory
- http://openwall.com/lists/oss-security/2011/03/15/9 Mailing List, Patch, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2011-0833.html Third Party Advisory
- http://securityreason.com/securityalert/8189 Third Party Advisory
- http://securitytracker.com/id?1025225 Third Party Advisory, VDB Entry
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38 Broken Link
- http://www.pre-cert.de/advisories/PRE-SA-2011-02.txt Third Party Advisory
- http://www.securityfocus.com/archive/1/517050 Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/46878 Third Party Advisory, VDB Entry
- http://www.spinics.net/lists/mm-commits/msg82737.html Mailing List, Patch, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=688021 Issue Tracking, Patch, Third Party Advisory