CVE-2011-2182 in Kernel

Resumen (Inglés)

The ldm_frag_add function in fs/partitions/ldm.c in the Linux kernel before 2.6.39.1 does not properly handle memory allocation for non-initial fragments, which might allow local users to conduct buffer overflow attacks, and gain privileges or obtain sensitive information, via a crafted LDM partition table. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1017.

Once again VulDB remains the best source for vulnerability data.

Reservar

2011-05-31

Divulgación

2012-06-13

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
60948	Linux Kernel ldm_frag_add desbordamiento de búfer	119	No está definido	Arreglo oficial	CVE-2011-2182

Fuentes

• MITRE
• NVD
• CVE Details