NVD

Id
11227  
Name
CVE-2011-4913  
Description
The rose_parse_ccitt function in net/rose/rose_subr.c in the Linux kernel before 2.6.39 does not validate the FAC_CCITT_DEST_NSAP and FAC_CCITT_SRC_NSAP fields, which allows remote attackers to (1) cause a denial of service (integer underflow, heap memory corruption, and panic) via a small length value in data sent to a ROSE socket, or (2) conduct stack-based buffer overflow attacks via a large length value in data sent to a ROSE socket.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-07  
Published
2012-06-21  
Modified Date
2016-08-18  
Seq
2011-4913  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
62125 11227 CVE-2011-4913 http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39  View
62126 11227 CVE-2011-4913 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=be20250c13f88375345ad99950190685eda51eb8  View
62127 11227 CVE-2011-4913 SUSE-SU-2015:0812  View
62128 11227 CVE-2011-4913 [oss-security] 20111227 Re: CVE request: kernel: multiple issues in ROSE  View
62129 11227 CVE-2011-4913 https://bugzilla.redhat.com/show_bug.cgi?id=770777  View
62130 11227 CVE-2011-4913 https://github.com/torvalds/linux/commit/be20250c13f88375345ad99950190685eda51eb8  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27129 JVNDB-2012-002836 Linux Kernel の rose_parse_ccitt 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の net/rose/rose_subr.c 内の rose_parse_ccitt 関数は、FAC_CCITT_DEST_NSAP および FAC_CCITT_SRC_NSAP フィールドを検証しないため、サービス運用妨害 (整数アンダーフロー、ヒープメモリ破損、およびパニック) 状態となる、またはスタックベースのバッファオーバーフロー攻撃を実行される脆弱性が存在します。 CVE-2011-4913 52820 CVE-2011-4913 11227 7.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002836.html 2012-06-21 2012-06-25 View