Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2011-4914

The ROSE protocol implementation in the Linux kernel before 2.6.39 does not verify that certain data-length values are consistent with the amount of data sent, which might allow remote attackers to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read) via crafted data to a ROSE socket.

  • Published: Jun 22, 2012
  • Updated: Apr 13, 2023
  • CVE: CVE-2011-4914
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.4
  • AV:N/AC:L/Au:N/C:P/I:N/A:P

CWEs:

Software From Fixed in
linux / linux_kernel 2.6.38-rc7 2.6.38-rc7.x
linux / linux_kernel 2.6.38-rc6 2.6.38-rc6.x
linux / linux_kernel 2.6.38-rc4 2.6.38-rc4.x
linux / linux_kernel 2.6.38.3 2.6.38.3.x
linux / linux_kernel - 2.6.38.8.x
linux / linux_kernel 2.6.38-rc3 2.6.38-rc3.x
linux / linux_kernel 2.6.38-rc5 2.6.38-rc5.x
linux / linux_kernel 2.6.38-rc2 2.6.38-rc2.x
linux / linux_kernel 2.6.38.6 2.6.38.6.x
linux / linux_kernel 2.6.38.1 2.6.38.1.x
linux / linux_kernel 2.6.38-rc1 2.6.38-rc1.x
linux / linux_kernel 2.6.38.5 2.6.38.5.x
linux / linux_kernel 2.6.38.2 2.6.38.2.x
linux / linux_kernel 2.6.38 2.6.38.x
linux / linux_kernel 2.6.38-rc8 2.6.38-rc8.x
linux / linux_kernel 2.6.38.4 2.6.38.4.x
linux / linux_kernel 2.6.38.7 2.6.38.7.x
novell / suse_linux_enterprise_server 10.0-sp4 10.0-sp4.x