NVD

Id
9625  
Name
CVE-2011-2906  
Description
** DISPUTED ** Integer signedness error in the pmcraid_ioctl_passthrough function in drivers/scsi/pmcraid.c in the Linux kernel before 3.1 might allow local users to cause a denial of service (memory consumption or memory corruption) via a negative size value in an ioctl call. NOTE: this may be a vulnerability only in unusual environments that provide a privileged program for obtaining the required file descriptor.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-07  
Published
2012-05-24  
Modified Date
2012-05-29  
Seq
2011-2906  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
54996 9625 CVE-2011-2906 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=b5b515445f4f5a905c5dd27e6e682868ccd6c09d  View
54997 9625 CVE-2011-2906 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1  View
54998 9625 CVE-2011-2906 [oss-security] 20110810 Re: CVE requests: Two kernel issues  View
54999 9625 CVE-2011-2906 https://github.com/torvalds/linux/commit/b5b515445f4f5a905c5dd27e6e682868ccd6c09d  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26834 JVNDB-2012-002541 Linux Kernel の pmcraid_ioctl_passthrough 関数における整数符号エラーの脆弱性 ** 未確定 ** 本件は、脆弱性として確定していません。 CVE-2011-2906 50813 CVE-2011-2906 9625 4.9 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002541.html 2012-05-24 2015-11-16 View