CVE-2011-1494
8.2 High
AI Score
Confidence
High
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.3%
Integer overflow in the _ctl_do_mpt_command function in drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 and earlier might allow local users to gain privileges or cause a denial of service (memory corruption) via an ioctl call specifying a crafted value that triggers a heap-based buffer overflow.
References
downloads.avaya.com/css/P8/documents/100145416
lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
lkml.org/lkml/2011/4/5/327
openwall.com/lists/oss-security/2011/04/05/32
openwall.com/lists/oss-security/2011/04/06/2
rhn.redhat.com/errata/RHSA-2011-0833.html
secunia.com/advisories/46397
www.securityfocus.com/archive/1/520102/100/0/threaded
www.securityfocus.com/bid/47185
www.vmware.com/security/advisories/VMSA-2011-0012.html
bugzilla.redhat.com/show_bug.cgi?id=694021
patchwork.kernel.org/patch/688021/
Social References
More
Related
8.2 High
AI Score
Confidence
High
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.3%