|
|
| |
|
| |
kernel: multiple vulnerabilities
| Package(s): | kernel |
CVE #(s): | CVE-2011-4131
CVE-2011-4132
|
| Created: | November 21, 2011 |
Updated: | July 10, 2012 |
| Description: |
From the Red Hat bugzilla:
nfs4_getfacl decoding causes a kernel Oops when a server returns more than 2
GETATTR bitmap words in response to the FATTR4_ACL attribute request.
While the NFS client only asks for one attribute (FATTR4_ACL) in the first
bitmap word, the NFSv4 protocol allows for the server to return unbounded
bitmaps.
From the Red Hat bugzilla:
A flaw was found in the way Linux kernel's Journaling Block Device (JBD)
handled invalid log first block value. An attacker able to mount malicious ext3
or ext4 image could use this flaw to crash the system.
|
| Alerts: |
|
( Log in to post comments)
|
|
|