NVD

Id
9002  
Name
CVE-2011-2182  
Description
The ldm_frag_add function in fs/partitions/ldm.c in the Linux kernel before 2.6.39.1 does not properly handle memory allocation for non-initial fragments, which might allow local users to conduct buffer overflow attacks, and gain privileges or obtain sensitive information, via a crafted LDM partition table. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1017.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2012-06-13  
Modified Date
2016-12-07  
Seq
2011-2182  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
51646 9002 CVE-2011-2182 http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39.1  View
51647 9002 CVE-2011-2182 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=cae13fe4cc3f24820ffb990c09110626837e85d4  View
51648 9002 CVE-2011-2182 HPSBGN02970  View
51649 9002 CVE-2011-2182 [oss-security] 20110605 Re: CVE request: kernel: fs/partitions: Kernel heap overflow via corrupted LDM partition tables  View
51650 9002 CVE-2011-2182 52334  View
51651 9002 CVE-2011-2182 https://github.com/torvalds/linux/commit/cae13fe4cc3f24820ffb990c09110626837e85d4  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26997 JVNDB-2012-002704 Linux Kernel の ldm_frag_add 関数におけるバッファオーバーフロー攻撃を実行される脆弱性 Linux Kernel の fs/partitions/ldm.c 内の ldm_frag_add 関数は、非初期フラグメントへのメモリの割り当てを適切に処理しないため、バッファオーバーフロー攻撃を実行され、権限を取得される、または重要な情報を取得される脆弱性が存在します。 CVE-2011-2182 50089 CVE-2011-2182 9002 7.2 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002704.html 2012-06-13 2012-06-15 View