NVD

Id
8061  
Name
CVE-2011-1082  
Description
fs/eventpoll.c in the Linux kernel before 2.6.38 places epoll file descriptors within other epoll data structures without properly checking for (1) closed loops or (2) deep chains, which allows local users to cause a denial of service (deadlock or stack memory consumption) via a crafted application that makes epoll_create and epoll_ctl system calls.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-07  
Published
2011-04-04  
Modified Date
2012-03-19  
Seq
2011-1082  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
45925 8061 CVE-2011-1082 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=22bacca48a1755f79b7e0f192ddb9fbb7fc6e64e  View
45926 8061 CVE-2011-1082 [oss-security] 20110301 CVE request: kernel: Multiple DoS issues in epoll  View
45927 8061 CVE-2011-1082 [oss-security] 20110302 Re: CVE request: kernel: Multiple DoS issues in epoll  View
45928 8061 CVE-2011-1082 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38  View
45929 8061 CVE-2011-1082 https://bugzilla.redhat.com/show_bug.cgi?id=681575  View
45930 8061 CVE-2011-1082 [linux-kernel] 20110205 [PATCH] epoll: Prevent deadlock through unsafe ->f_op->poll() calls.  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31424 JVNDB-2011-001664 Linux kernel の fs/eventpoll.c におけるサービス運用妨害 (DoS）の脆弱性 Linux kernel の fs/eventpoll.c は、epoll データ構造体のファイルディスクリプタの取り扱いにおいて、(1) closed loops、または (2) deep chains を適切にチェックしないため、 サービス運用妨害 (デッドロック、またはスタックメモリ消費）状態となる脆弱性が存在します。 CVE-2011-1082 48989 CVE-2011-1082 8061 4.9 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001664.html 2011-04-04 2011-06-28 View