NVD

Id
10009  
Name
CVE-2011-3353  
Description
Buffer overflow in the fuse_notify_inval_entry function in fs/fuse/dev.c in the Linux kernel before 3.1 allows local users to cause a denial of service (BUG_ON and system crash) by leveraging the ability to mount a FUSE filesystem.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-07  
Published
2012-05-24  
Modified Date
2012-05-25  
Seq
2011-3353  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
57360 10009 CVE-2011-3353 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=c2183d1e9b3f313dd8ba2b1b0197c8d9fb86a7ae  View
57361 10009 CVE-2011-3353 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1  View
57362 10009 CVE-2011-3353 [oss-security] 20110909 Re: CVE request -- kernel: fuse: check size of FUSE_NOTIFY_INVAL_ENTRY message  View
57363 10009 CVE-2011-3353 https://bugzilla.redhat.com/show_bug.cgi?id=736761  View
57364 10009 CVE-2011-3353 https://github.com/torvalds/linux/commit/c2183d1e9b3f313dd8ba2b1b0197c8d9fb86a7ae  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26838 JVNDB-2012-002545 Linux Kernel の fuse_notify_inval_entry 関数におけるバッファオーバーフローの脆弱性 Linux Kernel の fs/fuse/dev.c 内の fuse_notify_inval_entry 関数には、バッファオーバーフローの脆弱性が存在します。 CVE-2011-3353 51260 CVE-2011-3353 10009 4.9 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002545.html 2012-05-24 2012-05-28 View