Lucene search

RedhatCVELIST:CVE-2011-4124

HistoryOct 27, 2021 - 12:50 a.m.

CVE-2011-4124

2021-10-2700:50:04

CWE-20

redhat

www.cve.org

calibre

linux mount helper

input validation

argument injection

privilege elevation

cve-2011-4124

AI Score

9.8

Confidence

High

EPSS

0.005

Percentile

76.2%

JSON

Input validation issues were found in Calibre at devices/linux_mount_helper.c which can lead to argument injection and elevation of privileges.

CNA Affected

[
  {
    "product": "Calibre",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "unknown"
      }
    ]
  }
]

References

bugs.launchpad.net/calibre/+bug/885027

git.zx2c4.com/calibre-mount-helper-exploit/about/

lwn.net/Articles/464824/

www.openwall.com/lists/oss-security/2011/11/02/2