Lucene search

MitreCVE-2011-1474

HistoryDec 26, 2019 - 7:15 p.m.

CVE-2011-1474

2019-12-2619:15:10

CWE-835

CWE-400

mitre

web.nvd.nist.gov

cve-2011-1474

pax-linux

dos vulnerability

bounds check

system crash

nvd

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.4

Confidence

High

EPSS

Percentile

12.6%

JSON

A locally locally exploitable DOS vulnerability was found in pax-linux versions 2.6.32.33-test79.patch, 2.6.38-test3.patch, and 2.6.37.4-test14.patch. A bad bounds check in arch_get_unmapped_area_topdown triggered by programs doing an mmap after a MAP_GROWSDOWN mmap will create an infinite loop condition without releasing the VM semaphore eventually leading to a system crash.

Affected configurations

Nvd

Node

linuxlinux_kernelMatch2.6.32.33test79

linuxlinux_kernelMatch2.6.37.4test14

linuxlinux_kernelMatch2.6.38test3

VendorProductVersionCPE
linuxlinux_kernel2.6.32.33cpe:2.3:o:linux:linux_kernel:2.6.32.33:test79:*:*:*:*:*:*
linuxlinux_kernel2.6.37.4cpe:2.3:o:linux:linux_kernel:2.6.37.4:test14:*:*:*:*:*:*
linuxlinux_kernel2.6.38cpe:2.3:o:linux:linux_kernel:2.6.38:test3:*:*:*:*:*:*

Vendor	Product	Version	CPE
linux	linux_kernel	2.6.32.33	cpe:2.3:o:linux:linux_kernel:2.6.32.33:test79::::::
linux	linux_kernel	2.6.37.4	cpe:2.3:o:linux:linux_kernel:2.6.37.4:test14::::::
linux	linux_kernel	2.6.38	cpe:2.3:o:linux:linux_kernel:2.6.38:test3::::::

References

seclists.org/oss-sec/2011/q1/579

security-tracker.debian.org/tracker/CVE-2011-1474

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.4

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVE-2011-1474