NVD

Id
8427  
Name
CVE-2011-1495  
Description
drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 and earlier does not validate (1) length and (2) offset values before performing memory copy operations, which might allow local users to gain privileges, cause a denial of service (memory corruption), or obtain sensitive information from kernel memory via a crafted ioctl call, related to the _ctl_do_mpt_command and _ctl_diag_read_buffer functions.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-05-03  
Modified Date
2015-05-11  
Seq
2011-1495  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
48305 8427 CVE-2011-1495 http://downloads.avaya.com/css/P8/documents/100145416  View
48306 8427 CVE-2011-1495 SUSE-SU-2015:0812  View
48307 8427 CVE-2011-1495 [linux-kernel] 20110405 [PATCH] drivers/scsi/mpt2sas: prevent heap overflows and unchecked reads  View
48308 8427 CVE-2011-1495 [oss-security] 20110405 CVE request: kernel: two issues in mpt2sas  View
48309 8427 CVE-2011-1495 [oss-security] 20110406 Re: CVE request: kernel: two issues in mpt2sas  View
48310 8427 CVE-2011-1495 RHSA-2011:0833  View
48311 8427 CVE-2011-1495 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console  View
48312 8427 CVE-2011-1495 47185  View
48313 8427 CVE-2011-1495 http://www.vmware.com/security/advisories/VMSA-2011-0012.html  View
48314 8427 CVE-2011-1495 https://bugzilla.redhat.com/show_bug.cgi?id=694021  View
48315 8427 CVE-2011-1495 https://patchwork.kernel.org/patch/688021/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31427 JVNDB-2011-001667 Linux kernel の drivers/scsi/mpt2sas/mpt2sas_ctl.c における権限を取得される脆弱性 Linux kernel の drivers/scsi/mpt2sas/mpt2sas_ctl.c は、メモリコピー操作を実行する前に、(1) 長さ、および (2) オフセットの値を有効にしないため、権限を取得される、サービス運用妨害 (メモリ破損) 状態となる、またはカーネルメモリから重要な情報を取得される脆弱性が存在します。 CVE-2011-1495 49402 CVE-2011-1495 8427 7.2 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001667.html 2011-05-03 2012-12-20 View