NVD

Id
8140  
Name
CVE-2011-1171  
Description
net/ipv4/netfilter/ip_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected "" character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability to issue a crafted request, and then reading the argument to the resulting modprobe process.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2011-06-22  
Modified Date
2015-10-05  
Seq
2011-1171  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
46732 8140 CVE-2011-1171 http://downloads.avaya.com/css/P8/documents/100145416  View
46733 8140 CVE-2011-1171 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=78b79876761b86653df89c48a7010b5cbd41a84a  View
46734 8140 CVE-2011-1171 [linux-kernel] 20110310 [PATCH] ipv4: netfilter: ip_tables: fix infoleak to userspace  View
46735 8140 CVE-2011-1171 RHSA-2011:0833  View
46736 8140 CVE-2011-1171 8278  View
46737 8140 CVE-2011-1171 8283  View
46738 8140 CVE-2011-1171 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39  View
46739 8140 CVE-2011-1171 [oss-security] 20110318 CVE request: kernel: netfilter & econet infoleaks  View
46740 8140 CVE-2011-1171 [oss-security] 20110321 Re: CVE request: kernel: netfilter & econet infoleaks  View
46741 8140 CVE-2011-1171 [oss-security] 20110321 Re: CVE request: kernel: netfilter & econet infoleaks  View
46742 8140 CVE-2011-1171 https://bugzilla.redhat.com/show_bug.cgi?id=689327  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31580 JVNDB-2011-001820 Linux kernel の net/ipv4/netfilter/ip_tables.c における重要な情報を取得される脆弱性 Linux kernel の IPv4 の実装にある net/ipv4/netfilter/ip_tables.c は、構造体メンバの文字列データの終端に、"" 文字を適切に配置しないため、カーネルメモリから重要な情報を取得される脆弱性が存在します。 CVE-2011-1171 49078 CVE-2011-1171 8140 2.1 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001820.html 2011-05-18 2016-06-30 View