Vulnerability Database

290,020

Total vulnerabilities in the database

CVE-2011-1493

Array index error in the rose_parse_national function in net/rose/rose_subr.c in the Linux kernel before 2.6.39 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by composing FAC_NATIONAL_DIGIS data that specifies a large number of digipeaters, and then sending this data to a ROSE socket.

  • Published: Jun 22, 2012
  • Updated: Apr 13, 2023
  • CVE: CVE-2011-1493
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
linux / linux_kernel 2.6.38-rc7 2.6.38-rc7.x
linux / linux_kernel 2.6.38-rc6 2.6.38-rc6.x
linux / linux_kernel 2.6.38-rc4 2.6.38-rc4.x
linux / linux_kernel 2.6.38.3 2.6.38.3.x
linux / linux_kernel - 2.6.38.8.x
linux / linux_kernel 2.6.38-rc3 2.6.38-rc3.x
linux / linux_kernel 2.6.38-rc5 2.6.38-rc5.x
linux / linux_kernel 2.6.38-rc2 2.6.38-rc2.x
linux / linux_kernel 2.6.38.6 2.6.38.6.x
linux / linux_kernel 2.6.38.1 2.6.38.1.x
linux / linux_kernel 2.6.38-rc1 2.6.38-rc1.x
linux / linux_kernel 2.6.38.5 2.6.38.5.x
linux / linux_kernel 2.6.38.2 2.6.38.2.x
linux / linux_kernel 2.6.38 2.6.38.x
linux / linux_kernel 2.6.38-rc8 2.6.38-rc8.x
linux / linux_kernel 2.6.38.4 2.6.38.4.x
linux / linux_kernel 2.6.38.7 2.6.38.7.x