CVE-2011-1017
HighHeap-based buffer overflow in the ldm_frag_add function in fs/partitions/ldm.c in the Linux kernel 2.6.37.2 and earlier might allow local users to gain privileges or obtain sensitive information via a crafted LDM partition table.
CVSS 2.0 score
7.2
AV:L/AC:L/Au:N/C:C/I:C/A:C
Weakness type
CWE-787CVE-2011-1017 is a Out-of-bounds Write vulnerability
What is Out-of-bounds Write?
The product writes data past the end or before the beginning of the intended buffer. Learn more on MITRE CWE
References
11 total-
Exploit Mailing List Third Party Advisory
-
Exploit Mailing List Third Party Advisory
-
Patch Third Party Advisory
-
Mailing List Third Party Advisory
-
Third Party Advisory
Frequently asked questions
-
What is CVE-2011-1017?
CVE-2011-1017 is a High severity Linux kernel vulnerability with a CVSS score of 7.2 out of 10 , classified as an Out-of-bounds Write flaw (CWE-787) . CVE-2011-1017 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
What is the CVSS score for CVE-2011-1017?
CVE-2011-1017 has a CVSS score of 7.2 out of 10, rated High severity (CVSS 2.0). The vector string is
AV:L/AC:L/Au:N/C:C/I:C/A:C. -
Is there a patch available for CVE-2011-1017?
Monitor the NIST NVD and your Linux distribution's security advisories for CVE-2011-1017 patch availability.
-
Is CVE-2011-1017 actively exploited?
No. CVE-2011-1017 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.