CVE

Id
49660  
CVE No.
CVE-2011-1748  
Status
Candidate  
Description
The raw_release function in net/can/raw.c in the Linux kernel before 2.6.39-rc6 does not properly validate a socket data structure, which allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a crafted release operation.  
Phase
Assigned (20110419)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
539207 49660 CVE-2011-1748 MLIST:[netdev] 20110420 [PATCH v2] can: add missing socket check in can/raw release  View
539208 49660 CVE-2011-1748 URL:http://permalink.gmane.org/gmane.linux.network/192974  View
539209 49660 CVE-2011-1748 MLIST:[oss-security] 20110421 Re: CVE request: kernel: missing socket check in can/bcm release  View
539210 49660 CVE-2011-1748 URL:http://openwall.com/lists/oss-security/2011/04/20/7  View
539211 49660 CVE-2011-1748 MLIST:[oss-security] 20110421 Re: CVE request: kernel: missing socket check in can/bcm release  View
539212 49660 CVE-2011-1748 URL:http://openwall.com/lists/oss-security/2011/04/21/1  View
539213 49660 CVE-2011-1748 MLIST:[oss-security] 20110421 Re: CVE request: kernel: missing socket check in can/bcm release  View
539214 49660 CVE-2011-1748 URL:http://openwall.com/lists/oss-security/2011/04/21/2  View
539215 49660 CVE-2011-1748 MLIST:[oss-security] 20110421 Re: CVE request: kernel: missing socket check in can/bcm release  View
539216 49660 CVE-2011-1748 URL:http://openwall.com/lists/oss-security/2011/04/21/7  View
539217 49660 CVE-2011-1748 MLIST:[oss-security] 20110422 Re: CVE request: kernel: missing socket check in can/bcm release  View
539218 49660 CVE-2011-1748 URL:http://openwall.com/lists/oss-security/2011/04/22/2  View
539219 49660 CVE-2011-1748 MLIST:[oss-security] 20110425 Re: CVE request: kernel: missing socket check in can/bcm release  View
539220 49660 CVE-2011-1748 URL:http://openwall.com/lists/oss-security/2011/04/25/4  View
539221 49660 CVE-2011-1748 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=10022a6c66e199d8f61d9044543f38785713cbbd  View
539222 49660 CVE-2011-1748 CONFIRM:http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.39-rc6  View
539223 49660 CVE-2011-1748 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=698057  View
539224 49660 CVE-2011-1748 BID:47835  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
34297 JVNDB-2011-004539 ejabberd の expat_erl.c におけるサービス運用妨害 (DoS) の脆弱性 ejabberd の expat_erl.c は、エンティティ拡張中の再帰を適切に検出しないため、サービス運用妨害 (メモリおよび CPU 資源の消費) 状態となる脆弱性が存在します。 CVE-2011-1753 49660 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004539.html  View