CVE-2011-1080
CVSS v2.0
2.1 (Low)
EPSS
0.04 % (5th)
Affected Products
1
Advisories
16
The do_replace function in net/bridge/netfilter/ebtables.c in the Linux kernel before 2.6.39 does not ensure that a certain name field ends with a '\0' character, which allows local users to obtain potentially sensitive information from kernel stack memory by leveraging the CAP_NET_ADMIN capability to replace a table, and then reading a modprobe command line.
Weaknesses
- CWE-20
- Improper Input Validation
- CVE Status
- PUBLISHED
- CNA
- Red Hat, Inc.
- Published Date
-
2012-06-21 23:55:02
(12 years ago) - Updated Date
-
2023-02-13 04:29:03
(19 months ago)
Affected Products
Loading...
Loading...
Loading...
Configuration #1
|
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...