CVE-2011-2928 in Linux Kernel
Résumé (Anglaise)
The befs_follow_link function in fs/befs/linuxvfs.c in the Linux kernel before 3.1-rc3 does not validate the length attribute of long symlinks, which allows local users to cause a denial of service (incorrect pointer dereference and OOPS) by accessing a long symlink on a malformed Be filesystem.
Réserver
27/07/2011
Divulgation
29/08/2011
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 58392 | Linux Kernel befs_follow_link élévation de privilèges | 20 | Non défini | Correctif officiel | CVE-2011-2928 |