Rapid7 Vulnerability & Exploit Database

SUSE Linux Security Vulnerability: CVE-2011-1170

Free InsightVM Trial No credit card necessary
Watch Demo See how it all works
Back to Search

SUSE Linux Security Vulnerability: CVE-2011-1170

Severity
2
CVSS
(AV:L/AC:L/Au:N/C:P/I:N/A:N)
Published
06/22/2011
Created
07/25/2018
Added
02/17/2015
Modified
06/21/2018

Description

net/ipv4/netfilter/arp_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability to issue a crafted request, and then reading the argument to the resulting modprobe process.

Solution(s)

  • suse-upgrade-kernel-bigsmp
  • suse-upgrade-kernel-debug
  • suse-upgrade-kernel-debug-base
  • suse-upgrade-kernel-debug-devel
  • suse-upgrade-kernel-default
  • suse-upgrade-kernel-default-base
  • suse-upgrade-kernel-default-devel
  • suse-upgrade-kernel-desktop
  • suse-upgrade-kernel-desktop-base
  • suse-upgrade-kernel-desktop-devel
  • suse-upgrade-kernel-devel
  • suse-upgrade-kernel-docs
  • suse-upgrade-kernel-ec2
  • suse-upgrade-kernel-ec2-base
  • suse-upgrade-kernel-ec2-devel
  • suse-upgrade-kernel-ec2-extra
  • suse-upgrade-kernel-iseries64
  • suse-upgrade-kernel-kdump
  • suse-upgrade-kernel-kdumppae
  • suse-upgrade-kernel-pae
  • suse-upgrade-kernel-pae-base
  • suse-upgrade-kernel-pae-devel
  • suse-upgrade-kernel-ppc64
  • suse-upgrade-kernel-smp
  • suse-upgrade-kernel-source
  • suse-upgrade-kernel-source-vanilla
  • suse-upgrade-kernel-syms
  • suse-upgrade-kernel-trace
  • suse-upgrade-kernel-trace-base
  • suse-upgrade-kernel-trace-devel
  • suse-upgrade-kernel-vanilla
  • suse-upgrade-kernel-vanilla-base
  • suse-upgrade-kernel-vanilla-devel
  • suse-upgrade-kernel-vmi
  • suse-upgrade-kernel-vmi-base
  • suse-upgrade-kernel-vmi-devel
  • suse-upgrade-kernel-vmipae
  • suse-upgrade-kernel-xen
  • suse-upgrade-kernel-xen-base
  • suse-upgrade-kernel-xen-devel
  • suse-upgrade-kernel-xenpae
  • suse-upgrade-preload-kmp-default
  • suse-upgrade-preload-kmp-desktop

References

insightVM

Advanced vulnerability management analytics and reporting.
Key Features
Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;