CVE-2011-1577
Vulnerability Summary
Timeline
Description
Heap-based buffer overflow in the is_gpt_valid function in fs/partitions/efi.c in the Linux kernel 2.6.38 and earlier allows physically proximate attackers to cause a denial of service (OOPS) or possibly have unspecified other impact via a crafted size of the EFI GUID partition-table header on removable media.
CVSS Metrics
- v2.0•MEDIUM•Score: 4.9AV:L/AC:L/Au:N/C:N/I:N/A:C
EPSS Trends
Current EPSS score: 0.07%• Percentile: 22%
Techniques & Countermeasures
- CWE-119•Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
Affected Systems
- linux•linux_kernel
≤ 2.6.38 | 2.6.0 | 2.6.1 | 2.6.1:rc1 | 2.6.1:rc2 | 2.6.1:rc3 | 2.6.2 | 2.6.2:rc1 | 2.6.2:rc2 | 2.6.2:rc3 | 2.6.3 | 2.6.3:rc1 | 2.6.3:rc2 | 2.6.3:rc3 | 2.6.3:rc4 | 2.6.4 | 2.6.4:rc1 | 2.6.4:rc2 | 2.6.4:rc3 | 2.6.5 | 2.6.5:rc1 | 2.6.5:rc2 | 2.6.5:rc3 | 2.6.6 | 2.6.6:rc1 | 2.6.6:rc2 | 2.6.6:rc3 | 2.6.7 | 2.6.7:rc1 | 2.6.7:rc2 | 2.6.7:rc3 | 2.6.8 | 2.6.8:rc1 | 2.6.8:rc2 | 2.6.8:rc3 | 2.6.8:rc4 | 2.6.8.1 | 2.6.9 | 2.6.9:rc1 | 2.6.9:rc2 | 2.6.9:rc3 | 2.6.9:rc4 | 2.6.10 | 2.6.10:rc1 | 2.6.10:rc2 | 2.6.10:rc3 | 2.6.11 | 2.6.11:rc1 | 2.6.11:rc2 | 2.6.11:rc3 | 2.6.11:rc4 | 2.6.11:rc5 | 2.6.11.1 | 2.6.11.2 | 2.6.11.3 | 2.6.11.4 | 2.6.11.5 | 2.6.11.6 | 2.6.11.7 | 2.6.11.8 | 2.6.11.9 | 2.6.11.10 | 2.6.11.11 | 2.6.11.12 | 2.6.12 | 2.6.12:rc1 | 2.6.12:rc2 | 2.6.12:rc3 | 2.6.12:rc4 | 2.6.12:rc5 | 2.6.12:rc6 | 2.6.12.1 | 2.6.12.2 | 2.6.12.3 | 2.6.12.4 | 2.6.12.5 | 2.6.12.6 | 2.6.13 | 2.6.13:rc1 | 2.6.13:rc2 | 2.6.13:rc3 | 2.6.13:rc4 | 2.6.13:rc5 | 2.6.13:rc6 | 2.6.13:rc7 | 2.6.13.1 | 2.6.13.2 | 2.6.13.3 | 2.6.13.4 | 2.6.13.5 | 2.6.14 | 2.6.14:rc1 | 2.6.14:rc2 | 2.6.14:rc3 | 2.6.14:rc4 | 2.6.14:rc5 | 2.6.14.1 | 2.6.14.2 | 2.6.14.3 | 2.6.14.4 | 2.6.14.5 | 2.6.14.6 | 2.6.14.7 | 2.6.15 | 2.6.15:rc1 | 2.6.15:rc2 | 2.6.15:rc3 | 2.6.15:rc4 | 2.6.15:rc5 | 2.6.15:rc6 | 2.6.15:rc7 | 2.6.15.1 | 2.6.15.2 | 2.6.15.3 | 2.6.15.4 | 2.6.15.5 | 2.6.15.6 | 2.6.15.7 | 2.6.16 | 2.6.16:rc1 | 2.6.16:rc2 | 2.6.16:rc3 | 2.6.16:rc4 | 2.6.16:rc5 | 2.6.16:rc6 | 2.6.16.1 | 2.6.16.2 | 2.6.16.3 | 2.6.16.4 | 2.6.16.5 | 2.6.16.6 | 2.6.16.7 | 2.6.16.8 | 2.6.16.9 | 2.6.16.10 | 2.6.16.11 | 2.6.16.12 | 2.6.16.13 | 2.6.16.14 | 2.6.16.15 | 2.6.16.16 | 2.6.16.17 | 2.6.16.18 | 2.6.16.19 | 2.6.16.20 | 2.6.16.21 | 2.6.16.22 | 2.6.16.23 | 2.6.16.24 | 2.6.16.25 | 2.6.16.26 | 2.6.16.27 | 2.6.16.28 | 2.6.16.29 | 2.6.16.30 | 2.6.16.31 | 2.6.16.32 | 2.6.16.33 | 2.6.16.34 | 2.6.16.35 | 2.6.16.36 | 2.6.16.37 | 2.6.16.38 | 2.6.16.39 | 2.6.16.40 | 2.6.16.41 | 2.6.16.42 | 2.6.16.43 | 2.6.16.44 | 2.6.16.45 | 2.6.16.46 | 2.6.16.47 | 2.6.16.48 | 2.6.16.49 | 2.6.16.50 | 2.6.16.51 | 2.6.16.52 | 2.6.16.53 | 2.6.16.54 | 2.6.16.55 | 2.6.16.56 | 2.6.16.57 | 2.6.16.58 | 2.6.16.59 | 2.6.16.60 | 2.6.16.61 | 2.6.16.62 | 2.6.17 | 2.6.17:rc1 | 2.6.17:rc2 | 2.6.17:rc3 | 2.6.17:rc4 | 2.6.17:rc5 | 2.6.17:rc6 | 2.6.17.1 | 2.6.17.2 | 2.6.17.3 | 2.6.17.4 | 2.6.17.5 | 2.6.17.6 | 2.6.17.7 | 2.6.17.8 | 2.6.17.9 | 2.6.17.10 | 2.6.17.11 | 2.6.17.12 | 2.6.17.13 | 2.6.17.14 | 2.6.18 | 2.6.18:rc1 | 2.6.18:rc2 | 2.6.18:rc3 | 2.6.18:rc4 | 2.6.18:rc5 | 2.6.18:rc6 | 2.6.18:rc7 | 2.6.18.1 | 2.6.18.2 | 2.6.18.3 | 2.6.18.4 | 2.6.18.5 | 2.6.18.6 | 2.6.18.7 | 2.6.18.8 | 2.6.19 | 2.6.19:rc1 | 2.6.19:rc2 | 2.6.19:rc3 | 2.6.19:rc4 | 2.6.19:rc5 | 2.6.19:rc6 | 2.6.19.1 | 2.6.19.2 | 2.6.19.3 | 2.6.19.4 | 2.6.19.5 | 2.6.19.6 | 2.6.19.7 | 2.6.20 | 2.6.20:rc1 | 2.6.20:rc2 | 2.6.20:rc3 | 2.6.20:rc4 | 2.6.20:rc5 | 2.6.20:rc6 | 2.6.20:rc7 | 2.6.20.1 | 2.6.20.2 | 2.6.20.3 | 2.6.20.4 | 2.6.20.5 | 2.6.20.6 | 2.6.20.7 | 2.6.20.8 | 2.6.20.9 | 2.6.20.10 | 2.6.20.11 | 2.6.20.12 | 2.6.20.13 | 2.6.20.14 | 2.6.20.15 | 2.6.20.16 | 2.6.20.17 | 2.6.20.18 | 2.6.20.19 | 2.6.20.20 | 2.6.20.21 | 2.6.21 | 2.6.21:rc1 | 2.6.21:rc2 | 2.6.21:rc3 | 2.6.21:rc4 | 2.6.21:rc5 | 2.6.21:rc6 | 2.6.21:rc7 | 2.6.21.1 | 2.6.21.2 | 2.6.21.3 | 2.6.21.4 | 2.6.21.5 | 2.6.21.6 | 2.6.21.7 | 2.6.22 | 2.6.22:rc1 | 2.6.22:rc2 | 2.6.22:rc3 | 2.6.22:rc4 | 2.6.22:rc5 | 2.6.22:rc6 | 2.6.22:rc7 | 2.6.22.1 | 2.6.22.2 | 2.6.22.3 | 2.6.22.4 | 2.6.22.5 | 2.6.22.6 | 2.6.22.7 | 2.6.22.8 | 2.6.22.9 | 2.6.22.10 | 2.6.22.11 | 2.6.22.12 | 2.6.22.13 | 2.6.22.14 | 2.6.22.15 | 2.6.22.16 | 2.6.22.17 | 2.6.22.18 | 2.6.22.19 | 2.6.22.20 | 2.6.22.21 | 2.6.22.22 | 2.6.23 | 2.6.23:rc1 | 2.6.23:rc2 | 2.6.23:rc3 | 2.6.23:rc4 | 2.6.23:rc5 | 2.6.23:rc6 | 2.6.23:rc7 | 2.6.23:rc8 | 2.6.23:rc9 | 2.6.23.1 | 2.6.23.2 | 2.6.23.3 | 2.6.23.4 | 2.6.23.5 | 2.6.23.6 | 2.6.23.7 | 2.6.23.8 | 2.6.23.9 | 2.6.23.10 | 2.6.23.11 | 2.6.23.12 | 2.6.23.13 | 2.6.23.14 | 2.6.23.15 | 2.6.23.16 | 2.6.23.17 | 2.6.24 | 2.6.24:rc1 | 2.6.24:rc2 | 2.6.24:rc3 | 2.6.24:rc4 | 2.6.24:rc5 | 2.6.24:rc6 | 2.6.24:rc7 | 2.6.24:rc8 | 2.6.24.1 | 2.6.24.2 | 2.6.24.3 | 2.6.24.4 | 2.6.24.5 | 2.6.24.6 | 2.6.24.7 | 2.6.25 | 2.6.25:rc1 | 2.6.25:rc2 | 2.6.25:rc3 | 2.6.25:rc4 | 2.6.25:rc5 | 2.6.25:rc6 | 2.6.25:rc7 | 2.6.25:rc8 | 2.6.25:rc9 | 2.6.25.1 | 2.6.25.2 | 2.6.25.3 | 2.6.25.4 | 2.6.25.5 | 2.6.25.6 | 2.6.25.7 | 2.6.25.8 | 2.6.25.9 | 2.6.25.10 | 2.6.25.11 | 2.6.25.12 | 2.6.25.13 | 2.6.25.14 | 2.6.25.15 | 2.6.25.16 | 2.6.25.17 | 2.6.25.18 | 2.6.25.19 | 2.6.25.20 | 2.6.26 | 2.6.26:rc1 | 2.6.26:rc2 | 2.6.26:rc3 | 2.6.26:rc4 | 2.6.26:rc5 | 2.6.26:rc6 | 2.6.26:rc7 | 2.6.26:rc8 | 2.6.26:rc9 | 2.6.26.1 | 2.6.26.2 | 2.6.26.3 | 2.6.26.4 | 2.6.26.5 | 2.6.26.6 | 2.6.26.7 | 2.6.26.8 | 2.6.27 | 2.6.27:rc1 | 2.6.27:rc2 | 2.6.27:rc3 | 2.6.27:rc4 | 2.6.27:rc5 | 2.6.27:rc6 | 2.6.27:rc7 | 2.6.27:rc8 | 2.6.27:rc9 | 2.6.27.1 | 2.6.27.2 | 2.6.27.3 | 2.6.27.4 | 2.6.27.5 | 2.6.27.6 | 2.6.27.7 | 2.6.27.8 | 2.6.27.9 | 2.6.27.10 | 2.6.27.11 | 2.6.27.12 | 2.6.27.13 | 2.6.27.14 | 2.6.27.15 | 2.6.27.16 | 2.6.27.17 | 2.6.27.18 | 2.6.27.19 | 2.6.27.20 | 2.6.27.21 | 2.6.27.22 | 2.6.27.23 | 2.6.27.24 | 2.6.27.25 | 2.6.27.26 | 2.6.27.27 | 2.6.27.28 | 2.6.27.29 | 2.6.27.30 | 2.6.27.31 | 2.6.27.32 | 2.6.27.33 | 2.6.27.34 | 2.6.27.35 | 2.6.27.36 | 2.6.27.37 | 2.6.27.38 | 2.6.27.39 | 2.6.27.40 | 2.6.27.41 | 2.6.27.42 | 2.6.27.43 | 2.6.27.44 | 2.6.27.45 | 2.6.27.46 | 2.6.27.47 | 2.6.27.48 | 2.6.27.49 | 2.6.27.50 | 2.6.27.51 | 2.6.27.52 | 2.6.27.53 | 2.6.27.54 | 2.6.27.55 | 2.6.27.56 | 2.6.27.57 | 2.6.28 | 2.6.28:rc1 | 2.6.28:rc2 | 2.6.28:rc3 | 2.6.28:rc4 | 2.6.28:rc5 | 2.6.28:rc6 | 2.6.28:rc7 | 2.6.28:rc8 | 2.6.28:rc9 | 2.6.28.1 | 2.6.28.2 | 2.6.28.3 | 2.6.28.4 | 2.6.28.5 | 2.6.28.6 | 2.6.28.7 | 2.6.28.8 | 2.6.28.9 | 2.6.28.10 | 2.6.29 | 2.6.29:rc1 | 2.6.29:rc2 | 2.6.29:rc3 | 2.6.29:rc4 | 2.6.29:rc5 | 2.6.29:rc6 | 2.6.29:rc7 | 2.6.29:rc8 | 2.6.29.1 | 2.6.29.2 | 2.6.29.3 | 2.6.29.4 | 2.6.29.5 | 2.6.29.6 | 2.6.30 | 2.6.30:rc1 | 2.6.30:rc2 | 2.6.30:rc3 | 2.6.30:rc4 | 2.6.30:rc5 | 2.6.30:rc6 | 2.6.30:rc7 | 2.6.30:rc8 | 2.6.30.1 | 2.6.30.2 | 2.6.30.3 | 2.6.30.4 | 2.6.30.5 | 2.6.30.6 | 2.6.30.7 | 2.6.30.8 | 2.6.30.9 | 2.6.30.10 | 2.6.31 | 2.6.31:rc1 | 2.6.31:rc2 | 2.6.31:rc3 | 2.6.31:rc4 | 2.6.31:rc5 | 2.6.31:rc6 | 2.6.31:rc7 | 2.6.31:rc8 | 2.6.31:rc9 | 2.6.31.1 | 2.6.31.2 | 2.6.31.3 | 2.6.31.4 | 2.6.31.5 | 2.6.31.6 | 2.6.31.7 | 2.6.31.8 | 2.6.31.9 | 2.6.31.10 | 2.6.31.11 | 2.6.31.12 | 2.6.31.13 | 2.6.31.14 | 2.6.32 | 2.6.32:rc1 | 2.6.32:rc3 | 2.6.32:rc4 | 2.6.32:rc5 | 2.6.32:rc6 | 2.6.32:rc7 | 2.6.32:rc8 | 2.6.32.1 | 2.6.32.2 | 2.6.32.3 | 2.6.32.4 | 2.6.32.5 | 2.6.32.6 | 2.6.32.7 | 2.6.32.8 | 2.6.32.9 | 2.6.32.10 | 2.6.32.11 | 2.6.32.12 | 2.6.32.13 | 2.6.32.14 | 2.6.32.15 | 2.6.32.16 | 2.6.32.17 | 2.6.32.18 | 2.6.32.19 | 2.6.32.20 | 2.6.32.21 | 2.6.32.22 | 2.6.32.23 | 2.6.32.24 | 2.6.32.25 | 2.6.32.26 | 2.6.32.27 | 2.6.33 | 2.6.33:rc1 | 2.6.33:rc2 | 2.6.33:rc3 | 2.6.33:rc4 | 2.6.33:rc5 | 2.6.33:rc6 | 2.6.33:rc7 | 2.6.33:rc8 | 2.6.33.1 | 2.6.33.2 | 2.6.33.3 | 2.6.33.4 | 2.6.33.5 | 2.6.33.6 | 2.6.33.7 | 2.6.34 | 2.6.34:rc1 | 2.6.34:rc2 | 2.6.34:rc3 | 2.6.34:rc4 | 2.6.34:rc5 | 2.6.34:rc6 | 2.6.34:rc7 | 2.6.34.1 | 2.6.34.2 | 2.6.34.3 | 2.6.34.4 | 2.6.34.5 | 2.6.34.6 | 2.6.34.7 | 2.6.35 | 2.6.35:rc1 | 2.6.35:rc2 | 2.6.35:rc3 | 2.6.35:rc4 | 2.6.35:rc5 | 2.6.35:rc6 | 2.6.35.1 | 2.6.35.2 | 2.6.35.3 | 2.6.35.4 | 2.6.35.5 | 2.6.35.6 | 2.6.35.7 | 2.6.35.8 | 2.6.35.9 | 2.6.36 | 2.6.36:rc1 | 2.6.36:rc2 | 2.6.36:rc3 | 2.6.36:rc4 | 2.6.36:rc5 | 2.6.36:rc6 | 2.6.36:rc7 | 2.6.36:rc8 | 2.6.36.1 | 2.6.36.2 | 2.6.36.3 | 2.6.36.4 | 2.6.37 | 2.6.37:rc1 | 2.6.37:rc2 | 2.6.37:rc3 | 2.6.37:rc4 | 2.6.37:rc5 | 2.6.37:rc6 | 2.6.37:rc7 | 2.6.37:rc8 | 2.6.37.1 | 2.6.37.2 | 2.6.37.3 | 2.6.37.4 | 2.6.37.5 | 2.6.37.6 | 2.6.38:rc1 | 2.6.38:rc2 | 2.6.38:rc3 | 2.6.38:rc4 | 2.6.38:rc5 | 2.6.38:rc6 | 2.6.38:rc7 | 2.6.38:rc8
References (12)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66773
- http://securitytracker.com/id?1025355
- https://bugzilla.redhat.com/show_bug.cgi?id=695976
- http://openwall.com/lists/oss-security/2011/04/13/1
- http://www.securityfocus.com/bid/47343
- http://rhn.redhat.com/errata/RHSA-2011-0833.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061236.html
- http://securityreason.com/securityalert/8238
- http://www.securityfocus.com/archive/1/517477/100/0/threaded
- http://www.spinics.net/lists/mm-commits/msg83274.html
- http://downloads.avaya.com/css/P8/documents/100145416
- http://openwall.com/lists/oss-security/2011/04/12/17