CVE

Id
50437  
CVE No.
CVE-2011-2525  
Status
Candidate  
Description
The qdisc_notify function in net/sched/sch_api.c in the Linux kernel before 2.6.35 does not prevent tc_fill_qdisc function calls referencing builtin (aka CQ_F_BUILTIN) Qdisc structures, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a crafted call.  
Phase
Assigned (20110615)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
545320 50437 CVE-2011-2525 MLIST:[netdev] 20100521 tc: RTM_GETQDISC causes kernel OOPS  View
545321 50437 CVE-2011-2525 URL:http://kerneltrap.org/mailarchive/linux-netdev/2010/5/21/6277805  View
545322 50437 CVE-2011-2525 MLIST:[oss-security] 20110712 CVE-2011-2525 kernel: kernel: net_sched: fix qdisc_notify()  View
545323 50437 CVE-2011-2525 URL:http://openwall.com/lists/oss-security/2011/07/12/1  View
545324 50437 CVE-2011-2525 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=53b0f08042f04813cd1a7473dacd3edfacb28eb3  View
545325 50437 CVE-2011-2525 CONFIRM:http://mirror.anl.gov/pub/linux/kernel/v2.6/ChangeLog-2.6.35  View
545326 50437 CVE-2011-2525 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=720552  View
545327 50437 CVE-2011-2525 REDHAT:RHSA-2011:1065  View
545328 50437 CVE-2011-2525 URL:http://rhn.redhat.com/errata/RHSA-2011-1065.html  View
545329 50437 CVE-2011-2525 REDHAT:RHSA-2011:1163  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33244 JVNDB-2011-003484 Rockwell Automation RSLinx Classic におけるバッファオーバーフローの脆弱性 Rockwell Automation RSLinx Classic の EDS Hardware Installation Tool 内の RSHWare.exe における RSEds.dll には、バッファオーバーフローの脆弱性が存在します。 CVE-2011-2530 50437 9.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003484.html  View