NVD

Id
8132  
Name
CVE-2011-1163  
Description
The osf_partition function in fs/partitions/osf.c in the Linux kernel before 2.6.38 does not properly handle an invalid number of partitions, which might allow local users to obtain potentially sensitive information from kernel heap memory via vectors related to partition-table parsing.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2011-04-09  
Modified Date
2015-05-11  
Seq
2011-1163  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
46644 8132 CVE-2011-1163 http://downloads.avaya.com/css/P8/documents/100145416  View
46645 8132 CVE-2011-1163 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=1eafbfeb7bdf59cfe173304c76188f3fd5f1fd05  View
46646 8132 CVE-2011-1163 SUSE-SU-2015:0812  View
46647 8132 CVE-2011-1163 [oss-security] 20110315 Re: CVE Request: kernel: fs/partitions: Corrupted OSF partition table can cause information disclosure  View
46648 8132 CVE-2011-1163 [oss-security] 20110315 CVE Request: kernel: fs/partitions: Corrupted OSF partition table can cause information disclosure  View
46649 8132 CVE-2011-1163 RHSA-2011:0833  View
46650 8132 CVE-2011-1163 8189  View
46651 8132 CVE-2011-1163 1025225  View
46652 8132 CVE-2011-1163 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38  View
46653 8132 CVE-2011-1163 http://www.pre-cert.de/advisories/PRE-SA-2011-02.txt  View
46654 8132 CVE-2011-1163 20110317 [PRE-SA-2011-02] Information disclosure vulnerability in the OSF partition handling code of the Linux kernel  View
46655 8132 CVE-2011-1163 46878  View
46656 8132 CVE-2011-1163 [mm-commits] 20110314 + fs-partitions-osfc-corrupted-osf-partition-table-can-cause-information-disclosure.patch added to -mm tree  View
46657 8132 CVE-2011-1163 https://bugzilla.redhat.com/show_bug.cgi?id=688021  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31425 JVNDB-2011-001665 Linux kernel の fs/partitions/osf.c における重要な情報を取得される脆弱性 Linux kernel の fs/partitions/osf.c は、パーティションテーブルの構文解析に関する処理に不備があり、不正なパーティション数を適切に処理しないため、kernel ヒープメモリから重要な情報を取得される脆弱性が存在します。 CVE-2011-1163 49070 CVE-2011-1163 8132 2.1 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001665.html 2011-04-10 2016-06-30 View