Array index error in the rose_parse_national function in net/rose/rose_subr.c in the Linux kernel before 2.6.39 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by composing FAC_NATIONAL_DIGIS data that specifies a large number of digipeaters, and then sending this data to a ROSE socket.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2012-06-21 16:55
Updated : 2023-02-12 17:19
NVD link : CVE-2011-1493
Mitre link : CVE-2011-1493
JSON object : View
CWE
Products Affected
linux
- linux_kernel