Back to search
CVE-2011-1577
Published: May 3, 2011
Modified: Aug 6, 2024
PUBLISHED
Description
Heap-based buffer overflow in the is_gpt_valid function in fs/partitions/efi.c in the Linux kernel 2.6.38 and earlier allows physically proximate attackers to cause a denial of service (OOPS) or possibly have unspecified other impact via a crafted size of the EFI GUID partition-table header on removable media.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
kernel-guid-dos(66773)
vdb-entry
x_refsource_XF
1025355
vdb-entry
x_refsource_SECTRACK
https://bugzilla.redhat.com/show_bug.cgi?id=695976
x_refsource_CONFIRM
47343
vdb-entry
x_refsource_BID
RHSA-2011:0833
vendor-advisory
x_refsource_REDHAT
FEDORA-2011-7823
vendor-advisory
x_refsource_FEDORA
8238
third-party-advisory
x_refsource_SREASON
20110413 [PRE-SA-2011-03] Denial-of-service vulnerability in EFI partition handling code of the Linux kernel
mailing-list
x_refsource_BUGTRAQ
http://downloads.avaya.com/css/P8/documents/100145416
x_refsource_CONFIRM
[oss-security] 20110412 CVE Request: kernel: fs/partitions: Corrupted GUID partition tables can cause kernel oops
mailing-list
x_refsource_MLIST
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now