PT-2011-1620 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.37 Description: The issue is related to the iowarrior write function in the Linux kernel, which does not properly allocate memory. This could allow local users to trigger a heap-based buffer overflow,...

kernel: iowarrior usb device heap overflow

The iowarriorwrite function in drivers/usb/misc/iowarrior.c in the Linux kernel before 2.6.37 does not properly allocate memory, which might allow local users to trigger a heap-based buffer overflow, and consequently cause a denial of service or gain privileges, via a long report...