NVD

Id
9838  
Name
CVE-2011-3149  
Description
The _expand_arg function in the pam_env module (modules/pam_env/pam_env.c) in Linux-PAM (aka pam) before 1.1.5 does not properly handle when environment variable expansion can overflow, which allows local users to cause a denial of service (CPU consumption).  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2012-07-22  
Modified Date
2014-03-05  
Seq
2011-3149  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
56450 9838 CVE-2011-3149 http://git.fedorahosted.org/git/?p=linux-pam.git;a=commitdiff;h=109823cb621c900c07c4b6cdc99070d354d19444  View
56451 9838 CVE-2011-3149 GLSA-201206-31  View
56452 9838 CVE-2011-3149 USN-1237-1  View
56453 9838 CVE-2011-3149 https://bugs.launchpad.net/ubuntu/+source/pam/+bug/874565  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27565 JVNDB-2012-003272 Linux-PAM の modules/pam_env/pam_env.c におけるサービス運用妨害 (DoS) の脆弱性 Linux-PAM (略称 pam) の pam_env モジュール (modules/pam_env/pam_env.c) 内の _expand_arg 関数は、環境変数の展開がオーバーフローする場合に適切に対処しないため、サービス運用妨害 (CPU 資源の消費) 状態となる脆弱性が存在します。 CVE-2011-3149 51056 CVE-2011-3149 9838 2.1 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003272.html 2012-07-22 2012-07-24 View