CVE

Id
49391  
CVE No.
CVE-2011-1479  
Status
Candidate  
Description
Double free vulnerability in the inotify subsystem in the Linux kernel before 2.6.39 allows local users to cause a denial of service (system crash) via vectors involving failed attempts to create files. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-4250.  
Phase
Assigned (20110321)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
536147 49391 CVE-2011-1479 MLIST:[oss-security] 20110411 Re: CVE request: kernel: inotify memory leak  View
536148 49391 CVE-2011-1479 URL:http://www.openwall.com/lists/oss-security/2011/04/11/1  View
536149 49391 CVE-2011-1479 CONFIRM:http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39  View
536150 49391 CVE-2011-1479 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=d0de4dc584ec6aa3b26fffea320a8457827768fc  View
536151 49391 CVE-2011-1479 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=691793  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
34160 JVNDB-2011-004402 Red Hat JBoss Enterprise SOA Platform および JBoss Enterprise Application Platform の JBoss Seam 2 framework の jboss-seam.jar における任意の Java コード実行を引き起こす脆弱性 Red Hat JBoss Enterprise SOA Platform および JBoss Enterprise Application Platform (JBoss EAP または JBEAP) に含まれる JBoss Seam 2 framework の jboss-seam.jar は、ページ例外ハンドリングにおいて Expression Language (EL) 文を適切に制限しないため、任意の Java コード実行を引き起こす脆弱性が存在します。 CVE-2011-1484 49391 6.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004402.html  View