| ID |
CVE-2011-2906
|
| Sažetak |
Integer signedness error in the pmcraid_ioctl_passthrough function in drivers/scsi/pmcraid.c in the Linux kernel before 3.1 might allow local users to cause a denial of service (memory consumption or memory corruption) via a negative size value in an ioctl call. NOTE: this may be a vulnerability only in unusual environments that provide a privileged program for obtaining the required file descriptor. |
| Reference |
|
| CVSS |
| Base: | 4.7 |
| Impact: | 6.9 |
| Exploitability: | 3.4 |
|
| Pristup |
| Vektor | Složenost | Autentikacija |
| LOCAL |
MEDIUM |
NONE |
|
| Impact |
| Povjerljivost | Cjelovitost | Dostupnost |
| NONE |
NONE |
COMPLETE |
|
| CVSS vektor |
AV:L/AC:M/Au:N/C:N/I:N/A:C |
| Zadnje važnije ažuriranje |
07-08-2024 - 00:15 |
| Objavljeno |
24-05-2012 - 23:55 |
