NVD

Id
8139  
Name
CVE-2011-1170  
Description
net/ipv4/netfilter/arp_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected "" character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability to issue a crafted request, and then reading the argument to the resulting modprobe process.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2011-06-22  
Modified Date
2015-10-05  
Seq
2011-1170  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
46721 8139 CVE-2011-1170 http://downloads.avaya.com/css/P8/documents/100145416  View
46722 8139 CVE-2011-1170 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=42eab94fff18cb1091d3501cd284d6bd6cc9c143  View
46723 8139 CVE-2011-1170 [netfilter-devel] 20110310 [PATCH] ipv4: netfilter: arp_tables: fix infoleak to userspace  View
46724 8139 CVE-2011-1170 RHSA-2011:0833  View
46725 8139 CVE-2011-1170 8278  View
46726 8139 CVE-2011-1170 8282  View
46727 8139 CVE-2011-1170 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39  View
46728 8139 CVE-2011-1170 [oss-security] 20110318 CVE request: kernel: netfilter & econet infoleaks  View
46729 8139 CVE-2011-1170 [oss-security] 20110321 Re: CVE request: kernel: netfilter & econet infoleaks  View
46730 8139 CVE-2011-1170 [oss-security] 20110321 Re: CVE request: kernel: netfilter & econet infoleaks  View
46731 8139 CVE-2011-1170 https://bugzilla.redhat.com/show_bug.cgi?id=689321  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31579 JVNDB-2011-001819 Linux kernel の net/ipv4/netfilter/arp_tables.c における重要な情報を取得される脆弱性 Linux kernel の IPv4 の実装にある net/ipv4/netfilter/arp_tables.c は、構造体メンバの文字列データの終端に、"" 文字を適切に配置しないため、カーネルメモリから重要な情報を取得される脆弱性が存在します。 CVE-2011-1170 49077 CVE-2011-1170 8139 2.1 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001819.html 2011-05-18 2016-06-30 View