4.6

CVE-2011-4127

Exploit
The Linux kernel before 3.2.2 does not properly restrict SG_IO ioctl calls, which allows local users to bypass intended restrictions on disk read and write operations by sending a SCSI command to (1) a partition block device or (2) an LVM volume.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Suse ≫ Linux Enterprise Server Version 10 Update sp4
Linux ≫ Linux Kernel Version <= 3.2.1
Linux ≫ Linux Kernel Version 3.0 Update rc1
Linux ≫ Linux Kernel Version 3.0 Update rc2
Linux ≫ Linux Kernel Version 3.0 Update rc3
Linux ≫ Linux Kernel Version 3.0 Update rc4
Linux ≫ Linux Kernel Version 3.0 Update rc5
Linux ≫ Linux Kernel Version 3.0 Update rc6
Linux ≫ Linux Kernel Version 3.0 Update rc7
Linux ≫ Linux Kernel Version 3.0.1
Linux ≫ Linux Kernel Version 3.0.2
Linux ≫ Linux Kernel Version 3.0.3
Linux ≫ Linux Kernel Version 3.0.4
Linux ≫ Linux Kernel Version 3.0.5
Linux ≫ Linux Kernel Version 3.0.6
Linux ≫ Linux Kernel Version 3.0.7
Linux ≫ Linux Kernel Version 3.0.8
Linux ≫ Linux Kernel Version 3.0.9
Linux ≫ Linux Kernel Version 3.0.10
Linux ≫ Linux Kernel Version 3.0.11
Linux ≫ Linux Kernel Version 3.0.12
Linux ≫ Linux Kernel Version 3.0.13
Linux ≫ Linux Kernel Version 3.0.14
Linux ≫ Linux Kernel Version 3.0.15
Linux ≫ Linux Kernel Version 3.0.16
Linux ≫ Linux Kernel Version 3.0.17
Linux ≫ Linux Kernel Version 3.0.18
Linux ≫ Linux Kernel Version 3.0.19
Linux ≫ Linux Kernel Version 3.0.20
Linux ≫ Linux Kernel Version 3.0.21
Linux ≫ Linux Kernel Version 3.0.22
Linux ≫ Linux Kernel Version 3.0.23
Linux ≫ Linux Kernel Version 3.0.24
Linux ≫ Linux Kernel Version 3.0.25
Linux ≫ Linux Kernel Version 3.0.26
Linux ≫ Linux Kernel Version 3.0.27
Linux ≫ Linux Kernel Version 3.0.28
Linux ≫ Linux Kernel Version 3.0.29
Linux ≫ Linux Kernel Version 3.0.30
Linux ≫ Linux Kernel Version 3.0.31
Linux ≫ Linux Kernel Version 3.0.32
Linux ≫ Linux Kernel Version 3.0.33
Linux ≫ Linux Kernel Version 3.0.34
Linux ≫ Linux Kernel Version 3.1
Linux ≫ Linux Kernel Version 3.1 Update rc1
Linux ≫ Linux Kernel Version 3.1 Update rc2
Linux ≫ Linux Kernel Version 3.1 Update rc3
Linux ≫ Linux Kernel Version 3.1 Update rc4
Linux ≫ Linux Kernel Version 3.1.1
Linux ≫ Linux Kernel Version 3.1.2
Linux ≫ Linux Kernel Version 3.1.3
Linux ≫ Linux Kernel Version 3.1.4
Linux ≫ Linux Kernel Version 3.1.5
Linux ≫ Linux Kernel Version 3.1.6
Linux ≫ Linux Kernel Version 3.1.7
Linux ≫ Linux Kernel Version 3.1.8
Linux ≫ Linux Kernel Version 3.1.9
Linux ≫ Linux Kernel Version 3.1.10
Linux ≫ Linux Kernel Version 3.2
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.57% 0.424
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html
http://secunia.com/advisories/48898
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.2
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0bfc96cb77224736dfa35c3c555d37b3646ef35e
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ec8013beddd717d1740cfefb1a9b900deef85462
http://www.openwall.com/lists/oss-security/2011/12/22/5
https://bugzilla.redhat.com/show_bug.cgi?id=752375
https://github.com/torvalds/linux/commit/0bfc96cb77224736dfa35c3c555d37b3646ef35e
Patch
Exploit
https://github.com/torvalds/linux/commit/ec8013beddd717d1740cfefb1a9b900deef85462
Patch
Exploit