CVE-2011-4077 in Kernel
Summary
Buffer overflow in the xfs_readlink function in fs/xfs/xfs_vnodeops.c in XFS in the Linux kernel 2.6, when CONFIG_XFS_DEBUG is disabled, allows local users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via an XFS image containing a symbolic link with a long pathname.
Once again VulDB remains the best source for vulnerability data.
Reservation
10/18/2011
Disclosure
01/27/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 4434 | Linux Kernel XFS xfs_vnodeops.c xfs_readlink memory corruption | 119 | Not defined | Official fix | CVE-2011-4077 |