Vulnerability CVE-2011-4914

Vulnerability Name:

CVE-2011-4914 (CCN-76734)

Assigned:

2011-12-23

Published:

2012-04-26

Updated:

2023-02-13

Summary:

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): None Availibility (A): None

CVSS v2 Severity:

6.4 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P)
4.7 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): Partial

5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): None

Vulnerability Consequences:

Obtain Information

References:

Source: MITRE
Type: CNA
CVE-2011-4914

Source: secalert@redhat.com
Type: Broken Link
secalert@redhat.com

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: CCN
Type: Linux Kernel GIT Repository
rose: Add length checks to CALL_REQUEST parsing

Source: secalert@redhat.com
Type: Third Party Advisory
secalert@redhat.com

Source: DEBIAN
Type: DSA-2389
linux-2.6 -- privilege escalation/denial of service/information leak

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: CCN
Type: OSVDB ID: 78622
Linux Kernel ROSE Protocol Multiple Field Memory Corruption

Source: CCN
Type: Red Hat Bugzilla Bug 770777
(CVE-2011-1493, CVE-2011-4913, CVE-2011-4914) CVE-2011-1493 CVE-2011-4913 CVE-2011-4914 kernel: multiple issues in rose protocol

Source: secalert@redhat.com
Type: Issue Tracking, VDB Entry
secalert@redhat.com

Source: XF
Type: UNKNOWN
kernel-rose-protocol-info-disc(76734)

Source: secalert@redhat.com
Type: Exploit, Patch
secalert@redhat.com

Vulnerable Configuration:

Configuration CCN 1:

cpe:/o:linux:linux_kernel:2.6.38:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20114914	V	CVE-2011-4914	2017-09-27
oval:org.mitre.oval:def:15398	P	USN-1202-1 -- Linux kernel (OMAP4) vulnerabilities	2014-06-30
oval:org.mitre.oval:def:21142	P	USN-1218-1 -- linux vulnerabilities	2014-06-30
oval:org.mitre.oval:def:15142	P	USN-1204-1 -- Linux kernel (i.MX51) vulnerabilities	2014-06-30
oval:org.mitre.oval:def:14979	P	USN-1208-1 -- Linux kernel (Marvel DOVE) vulnerabilities	2014-06-30
oval:org.mitre.oval:def:21274	P	USN-1211-1 -- linux vulnerabilities	2014-06-30
oval:org.mitre.oval:def:15261	P	USN-1201-1 -- Linux kernel vulnerabilities	2014-06-30
oval:org.mitre.oval:def:20869	P	USN-1216-1 -- linux-ec2 vulnerabilities	2014-06-30
oval:org.mitre.oval:def:15019	P	USN-1256-1 -- Linux kernel (Natty backport) vulnerabilities	2014-06-30
oval:org.mitre.oval:def:15354	P	USN-1189-1 -- Linux kernel vulnerabilities	2014-06-30
oval:org.mitre.oval:def:20889	P	USN-1212-1 -- linux-ti-omap4 vulnerabilities	2014-06-30
oval:org.mitre.oval:def:15108	P	USN-1203-1 -- Linux kernel (Marvel DOVE) vulnerabilities	2014-06-30
oval:org.mitre.oval:def:15414	P	DSA-2389-1 linux-2.6 -- privilege escalation/denial of service/information leak	2014-06-23
oval:com.ubuntu.precise:def:20114914000	V	CVE-2011-4914 on Ubuntu 12.04 LTS (precise) - low.	2012-06-21