CVE-2011-1163

The osf_partition function in fs/partitions/osf.c in the Linux kernel before 2.6.38 does not properly handle an invalid number of partitions, which might allow local users to obtain potentially sensitive information from kernel heap memory via vectors related to partition-table parsing.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
2.1 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 29%
VendorProductVersion
linuxlinux_kernel
𝑥
< 2.6.38
redhatenterprise_linux_desktop
5.0
redhatenterprise_linux_desktop
6.0
redhatenterprise_linux_eus
5.6
redhatenterprise_linux_server
5.0
redhatenterprise_linux_server
6.0
redhatenterprise_linux_server_aus
5.6
redhatenterprise_linux_workstation
5.0
redhatenterprise_linux_workstation
6.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
linux
natty
Fixed 2.6.38-7.35
released
maverick
Fixed 2.6.35-30.55
released
lucid
Fixed 2.6.32-33.64
released
karmic
ignored
hardy
Fixed 2.6.24-29.91
released
dapper
dne
linux-ec2
natty
dne
maverick
ignored
lucid
Fixed 2.6.32-317.32
released
karmic
ignored
hardy
dne
dapper
dne
linux-fsl-imx51
natty
dne
maverick
dne
lucid
Fixed 2.6.31-610.27
released
karmic
ignored
hardy
dne
dapper
dne
linux-lts-backport-maverick
natty
dne
maverick
dne
lucid
Fixed 2.6.35-30.55~lucid1
released
karmic
dne
hardy
dne
dapper
dne
linux-lts-backport-natty
natty
dne
maverick
dne
lucid
not-affected
hardy
dne
linux-mvl-dove
natty
dne
maverick
Fixed 2.6.32-417.34
released
lucid
Fixed 2.6.32-217.34
released
karmic
ignored
hardy
dne
dapper
dne
linux-source-2.6.15
natty
dne
maverick
dne
lucid
dne
karmic
dne
hardy
dne
dapper
ignored
linux-ti-omap4
natty
Fixed 2.6.38-1205.6
released
maverick
Fixed 2.6.35-903.23
released
lucid
dne
karmic
dne
hardy
dne
dapper
dne
References