Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2011-1082

Good to know:

icon

Date: April 2, 2011

fs/eventpoll.c in the Linux kernel before 2.6.38 places epoll file descriptors within other epoll data structures without properly checking for (1) closed loops or (2) deep chains, which allows local users to cause a denial of service (deadlock or stack memory consumption) via a crafted application that makes epoll_create and epoll_ctl system calls.

Language: C

Severity Score

Related Resources (10)

https://lkml.org/lkml/2011/2/5/220
https://people.canonical.com/~ubuntu-security/cve/CVE-2011-1082
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38
https://nvd.nist.gov/vuln/detail/CVE-2011-1082
https://bugzilla.redhat.com/show_bug.cgi?id=681575
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=22bacca48a1755f79b7e0f192ddb9fbb7fc6e64e
http://openwall.com/lists/oss-security/2011/03/02/2
https://access.redhat.com/security/cve/CVE-2011-1082
http://openwall.com/lists/oss-security/2011/03/02/1
https://www.mend.io/vulnerability-database/CVE-2011-1082

Severity Score

Weakness Type (CWE)

Resource Management Errors

CWE-399

Uncontrolled Resource Consumption ('Resource Exhaustion')

CWE-400

Top Fix

icon

Upgrade Version

Upgrade to version 2.6.38

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): HIGH

CVSS v2

Base Score:
Access Vector (AV): LOCAL
Access Complexity (AC): LOW
Authentication (AU): NONE
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): COMPLETE
Additional information:

Do you need more information?

Contact Us