NVD

Id
10018  
Name
CVE-2011-3363  
Description
The setup_cifs_sb function in fs/cifs/connect.c in the Linux kernel before 2.6.39 does not properly handle DFS referrals, which allows remote CIFS servers to cause a denial of service (system crash) by placing a referral at the root of a share.  
Reject
 
CVSS Version
2  
CVSS Score
5.4  
Severity
Medium  
CVSS Base Score
5.4  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-07  
Published
2012-05-24  
Modified Date
2012-05-29  
Seq
2011-3363  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
57447 10018 CVE-2011-3363 http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39  View
57448 10018 CVE-2011-3363 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=70945643722ffeac779d2529a348f99567fa5c33  View
57449 10018 CVE-2011-3363 [oss-security] 20110914 Re: CVE request -- kernel: cifs: always do is_path_accessible check in cifs_mount  View
57450 10018 CVE-2011-3363 https://bugzilla.redhat.com/show_bug.cgi?id=738291  View
57451 10018 CVE-2011-3363 https://github.com/torvalds/linux/commit/70945643722ffeac779d2529a348f99567fa5c33  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26840 JVNDB-2012-002547 Linux Kernel の setup_cifs_sb 関数におけるサービス運用妨害 (システムクラッシュ) の脆弱性 Linux Kernel の fs/cifs/connect.c 内の setup_cifs_sb 関数は、DFS の委任を適切に処理しないため、サービス運用妨害 (システムクラッシュ) 状態となる脆弱性が存在します。 CVE-2011-3363 51270 CVE-2011-3363 10018 5.4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002547.html 2012-05-24 2012-12-17 View