CVE-2011-1495
7.9 High
AI Score
Confidence
High
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.3%
drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 and earlier does not validate (1) length and (2) offset values before performing memory copy operations, which might allow local users to gain privileges, cause a denial of service (memory corruption), or obtain sensitive information from kernel memory via a crafted ioctl call, related to the _ctl_do_mpt_command and _ctl_diag_read_buffer functions.
References
downloads.avaya.com/css/P8/documents/100145416
lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
lkml.org/lkml/2011/4/5/327
openwall.com/lists/oss-security/2011/04/05/32
openwall.com/lists/oss-security/2011/04/06/2
rhn.redhat.com/errata/RHSA-2011-0833.html
secunia.com/advisories/46397
www.securityfocus.com/archive/1/520102/100/0/threaded
www.securityfocus.com/bid/47185
www.vmware.com/security/advisories/VMSA-2011-0012.html
bugzilla.redhat.com/show_bug.cgi?id=694021
patchwork.kernel.org/patch/688021/
Social References
More
Related
7.9 High
AI Score
Confidence
High
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.3%