NVD

Id
8141  
Name
CVE-2011-1172  
Description
net/ipv6/netfilter/ip6_tables.c in the IPv6 implementation in the Linux kernel before 2.6.39 does not place the expected "" character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability to issue a crafted request, and then reading the argument to the resulting modprobe process.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2011-06-22  
Modified Date
2015-10-05  
Seq
2011-1172  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
46743 8141 CVE-2011-1172 http://downloads.avaya.com/css/P8/documents/100145416  View
46744 8141 CVE-2011-1172 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=6a8ab060779779de8aea92ce3337ca348f973f54  View
46745 8141 CVE-2011-1172 [linux-kernel] 20110310 [PATCH] ipv6: netfilter: ip6_tables: fix infoleak to userspace  View
46746 8141 CVE-2011-1172 RHSA-2011:0833  View
46747 8141 CVE-2011-1172 8278  View
46748 8141 CVE-2011-1172 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39  View
46749 8141 CVE-2011-1172 [oss-security] 20110318 CVE request: kernel: netfilter & econet infoleaks  View
46750 8141 CVE-2011-1172 [oss-security] 20110321 Re: CVE request: kernel: netfilter & econet infoleaks  View
46751 8141 CVE-2011-1172 [oss-security] 20110321 Re: CVE request: kernel: netfilter & econet infoleaks  View
46752 8141 CVE-2011-1172 https://bugzilla.redhat.com/show_bug.cgi?id=689345  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31581 JVNDB-2011-001821 Linux kernel の net/ipv6/netfilter/ip6_tables.c における重要な情報を取得される脆弱性 Linux kernel の IPv6 の実装にある net/ipv6/netfilter/ip6_tables.c は、構造体メンバの文字列データの終端に、"" 文字を適切に配置しないため、カーネルメモリから重要な情報を取得される脆弱性が存在します。 CVE-2011-1172 49079 CVE-2011-1172 8141 2.1 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001821.html 2011-05-18 2016-06-30 View