Name: CVE-2011-3359: Improper Restriction of Operations within the Bounds of a Memory Buffer
Creator: Rapid7
Published: 2012-05-24T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2011-3359, CWE-119, CVSS 7.5, EPSS 0.03191

The dma_rx function in drivers/net/wireless/b43/dma.c in the Linux kernel before 2.6.39 does not properly allocate receive buffers, which allows remote attackers to cause a denial of service (system crash) via a crafted frame.

CVSS Details

CVSS 3.1 Base Score: 7.5

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Oracle_linux	—	Upgrade kernel	Oct 16, 2024	May 24, 2012
Ubuntu	—	Upgrade linux-image-2.6.32-32-generic-paeUpgrade linux-image-2.6.38-10-powerpcUpgrade linux-image-2.6.24-30-powerpc64-smpUpgrade linux-image-2.6.32-32-powerpc64-smpUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.38-10-omapUpgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.24-30-sparc64-smpUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.24-30-openvzUpgrade linux-image-2.6.38-10-virtualUpgrade linux-image-2.6.24-30-powerpcUpgrade linux-image-2.6.24-30-386Upgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.32-32-sparc64Upgrade linux-image-2.6.24-30-mckinleyUpgrade linux-image-2.6.24-30-xenUpgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.38-10-versatileUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.32-32-virtualUpgrade linux-image-2.6.24-30-lpiaUpgrade linux-image-2.6.24-30-sparc64Upgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.24-30-itaniumUpgrade linux-image-2.6.24-30-rtUpgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.24-30-virtualUpgrade linux-image-2.6.24-30-hppa64Upgrade linux-image-2.6.38-10-powerpc-smpUpgrade linux-image-2.6.24-30-genericUpgrade linux-image-2.6.32-32-preemptUpgrade linux-image-2.6.32-32-serverUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.38-10-generic-paeUpgrade linux-image-2.6.32-32-386Upgrade linux-image-2.6.38-10-powerpc64-smpUpgrade linux-image-2.6.24-30-lpiacompatUpgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.24-30-powerpc-smpUpgrade linux-image-2.6.24-30-hppa32Upgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.38-10-genericUpgrade linux-image-2.6.32-32-genericUpgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.32-32-powerpcUpgrade linux-image-2.6.24-30-serverUpgrade linux-image-2.6.32-32-lpiaUpgrade linux-image-2.6.38-10-server	Nov 8, 2024	May 24, 2012

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence