Lucene search
RootSSV:20653HistoryJun 25, 2011 - 12:00 a.m.
Linux Kernel agp_allocate_memory/agp_create_user_memory本地权限提升漏洞
2011-06-2500:00:00
Root
www.seebug.org
29
0.0004 Low
EPSS
Percentile
5.7%
BUGTRAQ ID: 47535
CVE ID: CVE-2011-1746
Linux Kernel是Linux操作系统的内核。
Linux Kernel在agp_allocate_memory/agp_create_user_memory的实现上存在本地权限提升漏洞，本地攻击者可利用此漏洞以内核权限执行任意代码，造成完全控制受影响计算机。
page_count是从用户空间复制的，agp_allocate_memory()尝试检查此数字是否过大，但是没有考虑溢出的情况。agp_create_user_memory()没有检查alloc_size是否是在没有溢出的情况下从num_agp_pages变量计算出来的。这可能会导致分配过小的缓冲区
Linux kernel 2.6.x
厂商补丁：
Linux
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
Related
prion
prion
Integer overflow
2011-05-09 19:55:00
cve
cve
CVE-2011-1746
2011-05-09 19:55:00
ubuntucve
ubuntucve
CVE-2011-1746
2011-05-09 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 01:03:32
nessus
nessus
Fedora 14 : kernel-2.6.35.13-91.fc14 (2011-6541)
2011-05-10 00:00:00
Ubuntu 10.10 : linux vulnerabilities (USN-1183-1)
2011-08-04 00:00:00
Ubuntu 8.04 LTS : linux vulnerabilities (USN-1170-1)
2011-07-18 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2011-08-03 00:00:00
Linux kernel vulnerabilities
2011-07-15 00:00:00
Linux kernel vulnerabilities
2011-07-15 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-1183-1)
2011-08-12 00:00:00
Ubuntu Update for linux USN-1183-1
2011-08-12 00:00:00
Ubuntu: Security Advisory (USN-1170-1)
2011-07-18 00:00:00
redhat
redhat
(RHSA-2011:1350) Important: kernel security, bug fix, and enhancement update
2011-10-05 00:00:00
(RHSA-2011:0927) Important: kernel security and bug fix update
2011-07-15 00:00:00
(RHSA-2011:1090) Moderate: rhev-hypervisor security and bug fix update
2011-07-27 00:00:00
suse
suse
remote denial of service in kernel
2011-09-20 17:41:52
Security update for the Linux kernel (important)
2011-09-21 00:08:35
remote denial of service, potential local in kernel
2011-08-12 14:12:39
oraclelinux
oraclelinux
kernel security, bug fix, and enhancement update
2011-10-05 00:00:00
kernel security and bug fix update
2011-07-18 00:00:00
Oracle Linux 5.7 kernel security and bug fix update
2011-07-31 00:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: kernel-2.6.35.13-92.fc14
2011-06-11 04:22:38
[SECURITY] Fedora 14 Update: kernel-2.6.35.13-91.fc14
2011-05-09 20:58:33
[SECURITY] Fedora 14 Update: kernel-2.6.35.14-95.fc14
2011-08-23 04:37:17
centos
centos
kernel security update
2011-07-18 21:33:40
securityvulns
securityvulns
[SECURITY] [DSA 2240-1] linux-2.6 security update
2011-05-26 00:00:00
Linux kernel security vulnerabilities
2011-05-26 00:00:00
osv
osv
linux-2.6 - several issues
2011-05-24 00:00:00
linux-2.6 - several issues
2011-06-18 00:00:00
debian
debian
[SECURITY] [DSA 2240-1] linux-2.6 security update
2011-05-25 05:22:29
[SECURITY] [DSA 2264-1] linux-2.6 security update
2011-06-19 01:11:37
vmware
vmware
VMware ESXi and ESX updates to third party library and ESX Service Console
2012-01-30 00:00:00
VMware ESXi and ESX updates to third party library and ESX Service Console
2012-01-30 00:00:00
packetstorm
packetstorm
Ubuntu Security Notice USN-1202-1
2011-09-14 00:00:00