CVE-2011-1180 Multiple stack-based buffer overflows in the iriap_getvaluebyclass_indication function in net/irda/iriap.c in the Linux kernel before 2.6.39 allow remote attackers to cause a denial of service (memory...
CriticalCVSS 9.8
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple stack-based buffer overflows in the iriap_getvaluebyclass_indication function in net/irda/iriap.c in the Linux kernel before 2.6.39 allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging connectivity to an IrDA infrared network and sending a large integer value for a (1) name length or (2) attribute length.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux kernel | < 2.6.39 | 2.6.39 |
References
- Ubuntu CVE tracker vendor-advisory
- USN-1187-1 vendor-advisory
- USN-1189-1 vendor-advisory
- USN-1202-1 vendor-advisory
- USN-1204-1 vendor-advisory
- USN-1167-1 vendor-advisory
- USN-1160-1 vendor-advisory
- USN-1141-1 vendor-advisory
- USN-1162-1 vendor-advisory
- USN-1159-1 vendor-advisory
- USN-1212-1 vendor-advisory
- USN-1256-1 vendor-advisory
- www.cve.org
- ftp.osuosl.org release-notes third-party-advisory
- git.kernel.org
- [oss-security] 20110322 Re: CVE requests - kernel: irda/decnet issues mailing-list third-party-advisory
- github.com third-party-advisory