Buffer overflow in Linux Kernel
CVE-2011-4077
Buffer overflow in the xfs_readlink function in fs/xfs/xfs_vnodeops.c in XFS in the Linux kernel 2.6, when CONFIG_XFS_DEBUG is disabled, allows local users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via an XFS image containing a symbolic link with a long pathname.
Vulnerability class: Buffer Overflow
EPSS: 0.005 (42.0th percentile) — read the EPSS interpretation.
Affected products
- Linux Linux_kernel
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (mailing-list, x_refsource_MLIST, Patch, Mailing List, Third Party Advisory)
- secalert@redhat.com (x_refsource_CONFIRM, Patch, Third Party Advisory, Issue Tracking)
- secalert@redhat.com (mailing-list, x_refsource_MLIST, Patch, Mailing List, Third Party Advisory)
- secalert@redhat.com (Exploit, Third Party Advisory, x_refsource_MISC)
- secalert@redhat.com (mailing-list, x_refsource_MLIST, Patch, Third Party Advisory)
- secalert@redhat.com (x_refsource_SECUNIA, Broken Link, third-party-advisory)
- secalert@redhat.com (x_refsource_HP, vendor-advisory, Mailing List, Third Party Advisory)