NVD

Id
10608  
Name
CVE-2011-4077  
Description
Buffer overflow in the xfs_readlink function in fs/xfs/xfs_vnodeops.c in XFS in the Linux kernel 2.6, when CONFIG_XFS_DEBUG is disabled, allows local users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via an XFS image containing a symbolic link with a long pathname.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2012-01-27  
Modified Date
2016-08-22  
Seq
2011-4077  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
59956 10608 CVE-2011-4077 HPSBGN02970  View
59957 10608 CVE-2011-4077 [xfs] 20111018 [PATCH] Fix possible memory corruption in xfs_readlink  View
59958 10608 CVE-2011-4077 [oss-security] 20111026 CVE Request -- kernel: xfs: potential buffer overflow in xfs_readlink()  View
59959 10608 CVE-2011-4077 [oss-security] 20111026 Re: CVE Request -- kernel: xfs: potential buffer overflow in xfs_readlink()  View
59960 10608 CVE-2011-4077 http://xorl.wordpress.com/2011/12/07/cve-2011-4077-linux-kernel-xfs-readlink-memory-corruption/  View
59961 10608 CVE-2011-4077 https://bugzilla.redhat.com/show_bug.cgi?id=749156  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25525 JVNDB-2012-001232 Linux kernel の xfs_readlink 関数におけるバッファオーバーフローの脆弱性 Linux kernel の XFS の fs/xfs/xfs_vnodeops.c 内にある xfs_readlink 関数には、CONFIG_XFS_DEBUG が無効の場合、バッファオーバーフローの脆弱性が存在します。 CVE-2011-4077 51984 CVE-2011-4077 10608 6.9 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001232.html 2012-01-27 2012-01-31 View