CVEvulnerability

CVE-2011-1493

7.5 HIGH Published 2012-06-21 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2012-06-21
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Array index error in the rose_parse_national function in net/rose/rose_subr.c in the Linux kernel before 2.6.39 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by composing FAC_NATIONAL_DIGIS data that specifies a large number of digipeaters, and then sending this data to a ROSE socket.

Affected configurations

• linux linux kernel (<= 2.6.38.8) • linux linux kernel 2.6.38 • linux linux kernel 2.6.38.1 • linux linux kernel 2.6.38.2 • linux linux kernel 2.6.38.3 • linux linux kernel 2.6.38.4 • linux linux kernel 2.6.38.5 • linux linux kernel 2.6.38.6 • linux linux kernel 2.6.38.7

References

http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 ftp.osuosl.org
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=be20250c13f88375345ad99950190685eda51eb8 git.kernel.org
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html lists.opensuse.org
http://www.openwall.com/lists/oss-security/2011/04/05/19 www.openwall.com
https://bugzilla.redhat.com/show_bug.cgi?id=770777 bugzilla.redhat.com
https://github.com/torvalds/linux/commit/be20250c13f88375345ad99950190685eda51eb8 Exploit, Patch
http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 ftp.osuosl.org
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=be20250c13f88375345ad99950190685eda51eb8 git.kernel.org
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html lists.opensuse.org
http://www.openwall.com/lists/oss-security/2011/04/05/19 www.openwall.com
https://bugzilla.redhat.com/show_bug.cgi?id=770777 bugzilla.redhat.com
https://github.com/torvalds/linux/commit/be20250c13f88375345ad99950190685eda51eb8 Exploit, Patch