CVE-2011-1012

Severity Score

4.9

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The ldm_parse_vmdb function in fs/partitions/ldm.c in the Linux kernel before 2.6.38-rc6-git6 does not validate the VBLK size value in the VMDB structure in an LDM partition table, which allows local users to cause a denial of service (divide-by-zero error and OOPS) via a crafted partition table.

La función ldm_parse_vmdb en fs/partitions/ldm.c en el kernel de Linux anterior a v2.6.38-rc6-git6, no valida el valor del tamaño VBLK en la estructura VMDB en una tabla de particiones LDM, lo que permite a usuarios locales causar una denegación de servicio (división por cero error y OOPS) a través de una tabla de particiones manipulada.

*Credits: N/A

CVSS Scores

NISTv2 4.9

Attack Vector

Local

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2011-02-14 CVE Reserved
2011-03-01 CVE Published
2023-03-08 EPSS Updated
2024-08-06 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-369: Divide By Zero

CAPEC

References (11)

URL	Tag	Source
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=294f6cf48666825d23c9372ef37631232746e40d	X_refsource_confirm
http://securityreason.com/securityalert/8115	Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.38-rc6-git6.log	Broken Link
http://www.pre-cert.de/advisories/PRE-SA-2011-01.txt	Third Party Advisory
http://www.securityfocus.com/archive/1/516615/100/0/threaded	Mailing List
http://www.securityfocus.com/bid/46512	Third Party Advisory
http://www.securitytracker.com/id?1025127	Third Party Advisory

URL	Date	SRC

URL	Date	SRC
http://openwall.com/lists/oss-security/2011/02/23/21	2023-02-13
http://openwall.com/lists/oss-security/2011/02/23/4	2023-02-13
http://www.spinics.net/lists/mm-commits/msg82429.html	2023-02-13

URL	Date	SRC
http://www.ubuntu.com/usn/USN-1146-1	2023-02-13

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 2.6.38 Search vendor "Linux" for product "Linux Kernel" and version " < 2.6.38"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.38 Search vendor "Linux" for product "Linux Kernel" and version "2.6.38"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.38 Search vendor "Linux" for product "Linux Kernel" and version "2.6.38"		rc1		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.38 Search vendor "Linux" for product "Linux Kernel" and version "2.6.38"		rc2		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.38 Search vendor "Linux" for product "Linux Kernel" and version "2.6.38"		rc3		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.38 Search vendor "Linux" for product "Linux Kernel" and version "2.6.38"		rc4		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.38 Search vendor "Linux" for product "Linux Kernel" and version "2.6.38"		rc5		Affected
Canonical Search vendor "Canonical"		Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux"				8.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "8.04"		-		Affected