Vulnerability Database

290,020

Total vulnerabilities in the database

CVE-2011-2209

Integer signedness error in the osf_sysinfo function in arch/alpha/kernel/osf_sys.c in the Linux kernel before 2.6.39.4 on the Alpha platform allows local users to obtain sensitive information from kernel memory via a crafted call.

  • Published: Jun 13, 2012
  • Updated: Apr 13, 2023
  • CVE: CVE-2011-2209
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 2.1
  • AV:L/AC:L/Au:N/C:N/I:N/A:P

CWEs:

Software From Fixed in
linux / linux_kernel 2.6.39-rc7 2.6.39-rc7.x
linux / linux_kernel 2.6.39-rc6 2.6.39-rc6.x
linux / linux_kernel 2.6.39-rc4 2.6.39-rc4.x
linux / linux_kernel 2.6.39.1 2.6.39.1.x
linux / linux_kernel 2.6.39-rc1 2.6.39-rc1.x
linux / linux_kernel 2.6.39-rc3 2.6.39-rc3.x
linux / linux_kernel - 2.6.39.3.x
linux / linux_kernel 2.6.39 2.6.39.x
linux / linux_kernel 2.6.39-rc2 2.6.39-rc2.x
linux / linux_kernel 2.6.39.2 2.6.39.2.x
linux / linux_kernel 2.6.39-rc5 2.6.39-rc5.x