Improper input validation in Linux Kernel
CVE-2011-1163
The osf_partition function in fs/partitions/osf.c in the Linux kernel before 2.6.38 does not properly handle an invalid number of partitions, which might allow local users to obtain potentially sensitive information from kernel heap memory via vectors related to partition-table parsing.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.004 (34.0th percentile) — read the EPSS interpretation.
Affected products
- Linux Linux_kernel
- Redhat Enterprise_linux_desktop — versions 5.0, 6.0
- Redhat Enterprise_linux_eus — versions 5.6
- Redhat Enterprise_linux_server — versions 5.0, 6.0
- Redhat Enterprise_linux_server_aus — versions 5.6
- Redhat Enterprise_linux_workstation — versions 5.0, 6.0
- Suse Linux_enterprise_server — versions 10
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (mailing-list, x_refsource_MLIST, Patch, Mailing List, Third Party Advisory)
- secalert@redhat.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (x_refsource_CONFIRM, Patch, Third Party Advisory, Issue Tracking)
- secalert@redhat.com (Third Party Advisory, x_refsource_SREASON, third-party-advisory)
- secalert@redhat.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
- secalert@redhat.com (mailing-list, x_refsource_MLIST, Patch, Mailing List, Third Party Advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
- secalert@redhat.com (mailing-list, x_refsource_MLIST, Patch, Mailing List, Third Party Advisory)
- secalert@redhat.com (Third Party Advisory, x_refsource_MISC)