NVD

Id
10644  
Name
CVE-2011-4127  
Description
The Linux kernel before 3.2.2 does not properly restrict SG_IO ioctl calls, which allows local users to bypass intended restrictions on disk read and write operations by sending a SCSI command to (1) a partition block device or (2) an LVM volume.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2012-07-03  
Modified Date
2015-09-03  
Seq
2011-4127  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
60192 10644 CVE-2011-4127 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=0bfc96cb77224736dfa35c3c555d37b3646ef35e  View
60193 10644 CVE-2011-4127 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ec8013beddd717d1740cfefb1a9b900deef85462  View
60194 10644 CVE-2011-4127 SUSE-SU-2015:0812  View
60195 10644 CVE-2011-4127 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.2  View
60196 10644 CVE-2011-4127 [oss-security] 20111222 CVE-2011-4127 kernel: possible privilege escalation via SG_IO ioctl  View
60197 10644 CVE-2011-4127 https://bugzilla.redhat.com/show_bug.cgi?id=752375  View
60198 10644 CVE-2011-4127 https://github.com/torvalds/linux/commit/0bfc96cb77224736dfa35c3c555d37b3646ef35e  View
60199 10644 CVE-2011-4127 https://github.com/torvalds/linux/commit/ec8013beddd717d1740cfefb1a9b900deef85462  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27261 JVNDB-2012-002968 Linux Kernel における制限を回避される脆弱性 Linux Kernel は、SG_IO ioctl コールを適切に制限しないため、ディスク上での読み取り、および書き込み操作の制限を回避される脆弱性が存在します。 CVE-2011-4127 52034 CVE-2011-4127 10644 4.6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002968.html 2012-07-03 2012-07-04 View