NVD

Id
9875  
Name
CVE-2011-3191  
Description
Integer signedness error in the CIFSFindNext function in fs/cifs/cifssmb.c in the Linux kernel before 3.1 allows remote CIFS servers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a large length value in a response to a read request for a directory.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2012-05-24  
Modified Date
2012-05-25  
Seq
2011-3191  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
56632 9875 CVE-2011-3191 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=9438fabb73eb48055b58b89fc51e0bc4db22fabd  View
56633 9875 CVE-2011-3191 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1  View
56634 9875 CVE-2011-3191 [oss-security] 20110824 Re: CVE request: kernel: cifs: singedness issue in CIFSFindNext()  View
56635 9875 CVE-2011-3191 https://bugzilla.redhat.com/show_bug.cgi?id=732869  View
56636 9875 CVE-2011-3191 https://github.com/torvalds/linux/commit/9438fabb73eb48055b58b89fc51e0bc4db22fabd  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26837 JVNDB-2012-002544 Linux Kernel の CIFSFindNext 関数における整数符号エラーの脆弱性 Linux Kernel の fs/cifs/cifssmb.c 内の CIFSFindNext 関数には、整数符号エラーの脆弱性が存在します。 CVE-2011-3191 51098 CVE-2011-3191 9875 10 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002544.html 2012-05-24 2012-12-17 View