Lucene search

RedhatCVE-2011-4127

HistoryJul 03, 2012 - 4:40 p.m.

CVE-2011-4127

2012-07-0316:40:31

CWE-264

redhat

web.nvd.nist.gov

228

linux kernel

3.2.2

bypass

disk access

vulnerability

nvd

cve-2011-4127

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.4

Confidence

High

EPSS

Percentile

5.1%

JSON

The Linux kernel before 3.2.2 does not properly restrict SG_IO ioctl calls, which allows local users to bypass intended restrictions on disk read and write operations by sending a SCSI command to (1) a partition block device or (2) an LVM volume.

Affected configurations

Nvd

Node

suselinux_enterprise_serverMatch10sp4

Node

linuxlinux_kernelRange≤3.2.1

linuxlinux_kernelMatch3.0rc1

linuxlinux_kernelMatch3.0rc2

linuxlinux_kernelMatch3.0rc3

linuxlinux_kernelMatch3.0rc4

linuxlinux_kernelMatch3.0rc5

linuxlinux_kernelMatch3.0rc6

linuxlinux_kernelMatch3.0rc7

linuxlinux_kernelMatch3.0.1

linuxlinux_kernelMatch3.0.2

linuxlinux_kernelMatch3.0.3

linuxlinux_kernelMatch3.0.4

linuxlinux_kernelMatch3.0.5

linuxlinux_kernelMatch3.0.6

linuxlinux_kernelMatch3.0.7

linuxlinux_kernelMatch3.0.8

linuxlinux_kernelMatch3.0.9

linuxlinux_kernelMatch3.0.10

linuxlinux_kernelMatch3.0.11

linuxlinux_kernelMatch3.0.12

linuxlinux_kernelMatch3.0.13

linuxlinux_kernelMatch3.0.14

linuxlinux_kernelMatch3.0.15

linuxlinux_kernelMatch3.0.16

linuxlinux_kernelMatch3.0.17

linuxlinux_kernelMatch3.0.18

linuxlinux_kernelMatch3.0.19

linuxlinux_kernelMatch3.0.20

linuxlinux_kernelMatch3.0.21

linuxlinux_kernelMatch3.0.22

linuxlinux_kernelMatch3.0.23

linuxlinux_kernelMatch3.0.24

linuxlinux_kernelMatch3.0.25

linuxlinux_kernelMatch3.0.26

linuxlinux_kernelMatch3.0.27

linuxlinux_kernelMatch3.0.28

linuxlinux_kernelMatch3.0.29

linuxlinux_kernelMatch3.0.30

linuxlinux_kernelMatch3.0.31

linuxlinux_kernelMatch3.0.32

linuxlinux_kernelMatch3.0.33

linuxlinux_kernelMatch3.0.34

linuxlinux_kernelMatch3.1

linuxlinux_kernelMatch3.1rc1

linuxlinux_kernelMatch3.1rc2

linuxlinux_kernelMatch3.1rc3

linuxlinux_kernelMatch3.1rc4

linuxlinux_kernelMatch3.1.1

linuxlinux_kernelMatch3.1.2

linuxlinux_kernelMatch3.1.3

linuxlinux_kernelMatch3.1.4

linuxlinux_kernelMatch3.1.5

linuxlinux_kernelMatch3.1.6

linuxlinux_kernelMatch3.1.7

linuxlinux_kernelMatch3.1.8

linuxlinux_kernelMatch3.1.9

linuxlinux_kernelMatch3.1.10

linuxlinux_kernelMatch3.2

VendorProductVersionCPE
suselinux_enterprise_server10cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel3.0cpe:2.3:o:linux:linux_kernel:3.0:rc1:*:*:*:*:*:*
linuxlinux_kernel3.0cpe:2.3:o:linux:linux_kernel:3.0:rc2:*:*:*:*:*:*
linuxlinux_kernel3.0cpe:2.3:o:linux:linux_kernel:3.0:rc3:*:*:*:*:*:*
linuxlinux_kernel3.0cpe:2.3:o:linux:linux_kernel:3.0:rc4:*:*:*:*:*:*
linuxlinux_kernel3.0cpe:2.3:o:linux:linux_kernel:3.0:rc5:*:*:*:*:*:*
linuxlinux_kernel3.0cpe:2.3:o:linux:linux_kernel:3.0:rc6:*:*:*:*:*:*
linuxlinux_kernel3.0cpe:2.3:o:linux:linux_kernel:3.0:rc7:*:*:*:*:*:*
linuxlinux_kernel3.0.1cpe:2.3:o:linux:linux_kernel:3.0.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
suse	linux_enterprise_server	10	cpe:2.3:o:suse:linux_enterprise_server:10:sp4::::::
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
linux	linux_kernel	3.0	cpe:2.3:o:linux:linux_kernel:3.0:rc1::::::
linux	linux_kernel	3.0	cpe:2.3:o:linux:linux_kernel:3.0:rc2::::::
linux	linux_kernel	3.0	cpe:2.3:o:linux:linux_kernel:3.0:rc3::::::
linux	linux_kernel	3.0	cpe:2.3:o:linux:linux_kernel:3.0:rc4::::::
linux	linux_kernel	3.0	cpe:2.3:o:linux:linux_kernel:3.0:rc5::::::
linux	linux_kernel	3.0	cpe:2.3:o:linux:linux_kernel:3.0:rc6::::::
linux	linux_kernel	3.0	cpe:2.3:o:linux:linux_kernel:3.0:rc7::::::
linux	linux_kernel	3.0.1	cpe:2.3:o:linux:linux_kernel:3.0.1:::::::*