CVE-2011-1747

Ubuntu Security Notice USN-1161-1

Severity Score

5.5

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The agp subsystem in the Linux kernel 2.6.38.5 and earlier does not properly restrict memory allocation by the (1) AGPIOC_RESERVE and (2) AGPIOC_ALLOCATE ioctls, which allows local users to cause a denial of service (memory consumption) by making many calls to these ioctls.

El subsistema agp en el kernel de Linux v2.6.38.5 y anteriores no restringe correctamente la asignación de memoria por el ( 1 ) AGPIOC_RESERVE y ( 2 )AGPIOC_ALLOCATE ioctls , lo cual permite a usuarios locales causar una denegación de servicio ( consumo de memoria ) haciendo muchas llamadas a estos ioctls.

Brad Spengler discovered that the kernel did not correctly account for userspace memory allocations during exec() calls. A local attacker could exploit this to consume all system memory, leading to a denial of service. Alexander Duyck discovered that the Intel Gigabit Ethernet driver did not correctly handle certain configurations. If such a device was configured without VLANs, a remote attacker could crash the system, leading to a denial of service. Various other issues were also addressed.

*Credits: N/A

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Local

Attack Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

None

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2011-04-19 CVE Reserved
2011-05-09 CVE Published
2024-08-06 CVE Updated
2025-03-30 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-399: Resource Management Errors

CAPEC

References (12)

URL	Tag	Source
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b522f02184b413955f3bc952e3776ce41edc6355	X_refsource_confirm
http://openwall.com/lists/oss-security/2011/04/21/4	Mailing List
http://openwall.com/lists/oss-security/2011/04/22/10	Mailing List
http://openwall.com/lists/oss-security/2011/04/22/11	Mailing List
http://openwall.com/lists/oss-security/2011/04/22/7	Mailing List
http://openwall.com/lists/oss-security/2011/04/22/8	Mailing List
http://openwall.com/lists/oss-security/2011/04/22/9	Mailing List
http://securitytracker.com/id?1025441	Third Party Advisory
http://www.securityfocus.com/bid/47832	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=698999	Issue Tracking
https://lkml.org/lkml/2011/4/14/294	Mailing List

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38.5	2023-02-13

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 2.6.38.5 Search vendor "Linux" for product "Linux Kernel" and version " < 2.6.38.5"		-		Affected