2.1 - CVE-2011-4110

Executive Summary

Informations
Name	CVE-2011-4110	First vendor Publication	2012-01-27
Vendor	Cve	Last vendor Modification	2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:L/Au:N/C:N/I:N/A:P)
Cvss Base Score	2.1	Attack Range	Local
Cvss Impact Score	2.9	Attack Complexity	Low
Cvss Expoit Score	3.9	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

The user_update function in security/keys/user_defined.c in the Linux kernel 2.6 allows local users to cause a denial of service (NULL pointer dereference and kernel oops) via vectors related to a user-defined key and "updating a negative key into a fully instantiated key."

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4110

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-264	Permissions, Privileges, and Access Controls

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:14673

Oval ID:	oval:org.mitre.oval:def:14673
Title:	USN-1344-1 -- linux vulnerabilities
Description:	linux: Linux kernel Several security issues were fixed in the kernel.
Family:	unix	Class:	patch
Reference(s):	USN-1344-1 CVE-2011-2203 CVE-2011-4110	Version:	5
Platform(s):	Ubuntu 10.04	Product(s):	linux
Definition Synopsis:
Ubuntu 10.04 is installed AND Installed architecture is all Packages section linux-image-2.6.32-38-powerpc DPKG is earlier than 2.6.32-38.83 AND linux-image-2.6.32-38-386 DPKG is earlier than 2.6.32-38.83 AND linux-image-2.6.32-38-sparc64 DPKG is earlier than 2.6.32-38.83 AND linux-image-2.6.32-38-generic-pae DPKG is earlier than 2.6.32-38.83 AND linux-image-2.6.32-38-preempt DPKG is earlier than 2.6.32-38.83 AND linux-image-2.6.32-38-lpia DPKG is earlier than 2.6.32-38.83 AND linux-image-2.6.32-38-sparc64-smp DPKG is earlier than 2.6.32-38.83 AND linux-image-2.6.32-38-powerpc64-smp DPKG is earlier than 2.6.32-38.83 AND linux-image-2.6.32-38-versatile DPKG is earlier than 2.6.32-38.83 AND linux-image-2.6.32-38-generic DPKG is earlier than 2.6.32-38.83 AND linux-image-2.6.32-38-virtual DPKG is earlier than 2.6.32-38.83 AND linux-image-2.6.32-38-server DPKG is earlier than 2.6.32-38.83 AND linux-image-2.6.32-38-powerpc-smp DPKG is earlier than 2.6.32-38.83 AND linux-image-2.6.32-38-ia64 DPKG is earlier than 2.6.32-38.83

Definition Id: oval:org.mitre.oval:def:14862

Oval ID:	oval:org.mitre.oval:def:14862
Title:	USN-1318-1 -- Linux kernel (FSL-IMX51) vulnerabilities
Description:	linux-fsl-imx51: Linux kernel for IMX51 Several security issues were fixed in the kernel.
Family:	unix	Class:	patch
Reference(s):	USN-1318-1 CVE-2011-1162 CVE-2011-2203 CVE-2011-4110	Version:	5
Platform(s):	Ubuntu 10.04	Product(s):	Linux
Definition Synopsis:
Ubuntu 10.04 is installed AND Installed architecture is all AND linux-image-2.6.31-612-imx51 DPKG is earlier than 2.6.31-612.32

Definition Id: oval:org.mitre.oval:def:15214

Oval ID:	oval:org.mitre.oval:def:15214
Title:	USN-1319-1 -- Linux kernel (OMAP4) vulnerabilities
Description:	linux-ti-omap4: Linux kernel for OMAP4 Several security issues were fixed in the kernel.
Family:	unix	Class:	patch
Reference(s):	USN-1319-1 CVE-2011-1162 CVE-2011-2203 CVE-2011-4110	Version:	5
Platform(s):	Ubuntu 11.04	Product(s):	Linux
Definition Synopsis:
Ubuntu 11.04 is installed AND Installed architecture is all AND linux-image-2.6.38-1209-omap4 DPKG is earlier than 2.6.38-1209.20

Definition Id: oval:org.mitre.oval:def:15220

Oval ID:	oval:org.mitre.oval:def:15220
Title:	USN-1345-1 -- Linux kernel vulnerabilities
Description:	linux: Linux kernel Several security issues were fixed in the kernel.
Family:	unix	Class:	patch
Reference(s):	USN-1345-1 CVE-2011-1162 CVE-2011-2203 CVE-2011-4110	Version:	5
Platform(s):	Ubuntu 11.04	Product(s):	Linux
Definition Synopsis:
Ubuntu 11.04 is installed AND Installed architecture is all Packages section linux-image-2.6.38-13-virtual DPKG is earlier than 2.6.38-13.54 AND linux-image-2.6.38-13-server DPKG is earlier than 2.6.38-13.54 AND linux-image-2.6.38-13-omap DPKG is earlier than 2.6.38-13.54 AND linux-image-2.6.38-13-powerpc-smp DPKG is earlier than 2.6.38-13.54 AND linux-image-2.6.38-13-powerpc DPKG is earlier than 2.6.38-13.54 AND linux-image-2.6.38-13-powerpc64-smp DPKG is earlier than 2.6.38-13.54 AND linux-image-2.6.38-13-generic-pae DPKG is earlier than 2.6.38-13.54 AND linux-image-2.6.38-13-versatile DPKG is earlier than 2.6.38-13.54 AND linux-image-2.6.38-13-generic DPKG is earlier than 2.6.38-13.54

Definition Id: oval:org.mitre.oval:def:15235

Oval ID:	oval:org.mitre.oval:def:15235
Title:	USN-1323-1 -- Linux kernel vulnerabilities
Description:	linux: Linux kernel Several security issues were fixed in the kernel.
Family:	unix	Class:	patch
Reference(s):	USN-1323-1 CVE-2011-1162 CVE-2011-2203 CVE-2011-3359 CVE-2011-4110	Version:	5
Platform(s):	Ubuntu 8.04	Product(s):	Linux
Definition Synopsis:
Ubuntu 8.04 is installed AND Installed architecture is all Packages section linux-image-2.6.24-30-virtual DPKG is earlier than 2.6.24-30.98 AND linux-image-2.6.24-30-server DPKG is earlier than 2.6.24-30.98 AND linux-image-2.6.24-30-mckinley DPKG is earlier than 2.6.24-30.98 AND linux-image-2.6.24-30-hppa64 DPKG is earlier than 2.6.24-30.98 AND linux-image-2.6.24-30-xen DPKG is earlier than 2.6.24-30.98 AND linux-image-2.6.24-30-powerpc-smp DPKG is earlier than 2.6.24-30.98 AND linux-image-2.6.24-30-lpia DPKG is earlier than 2.6.24-30.98 AND linux-image-2.6.24-30-sparc64 DPKG is earlier than 2.6.24-30.98 AND linux-image-2.6.24-30-rt DPKG is earlier than 2.6.24-30.98 AND linux-image-2.6.24-30-openvz DPKG is earlier than 2.6.24-30.98 AND linux-image-2.6.24-30-lpiacompat DPKG is earlier than 2.6.24-30.98 AND linux-image-2.6.24-30-sparc64-smp DPKG is earlier than 2.6.24-30.98 AND linux-image-2.6.24-30-386 DPKG is earlier than 2.6.24-30.98 AND linux-image-2.6.24-30-powerpc DPKG is earlier than 2.6.24-30.98 AND linux-image-2.6.24-30-hppa32 DPKG is earlier than 2.6.24-30.98 AND linux-image-2.6.24-30-itanium DPKG is earlier than 2.6.24-30.98 AND linux-image-2.6.24-30-powerpc64-smp DPKG is earlier than 2.6.24-30.98 AND linux-image-2.6.24-30-generic DPKG is earlier than 2.6.24-30.98

Definition Id: oval:org.mitre.oval:def:15269

Oval ID:	oval:org.mitre.oval:def:15269
Title:	USN-1328-1 -- Linux kernel (Marvell DOVE) vulnerabilities
Description:	linux-mvl-dove: Linux kernel for DOVE Several security issues were fixed in the kernel.
Family:	unix	Class:	patch
Reference(s):	USN-1328-1 CVE-2011-2203 CVE-2011-4110	Version:	5
Platform(s):	Ubuntu 10.10	Product(s):	Linux
Definition Synopsis:
Ubuntu 10.10 is installed AND Installed architecture is all AND linux-image-2.6.32-422-dove DPKG is earlier than 2.6.32-422.40

Definition Id: oval:org.mitre.oval:def:15311

Oval ID:	oval:org.mitre.oval:def:15311
Title:	USN-1324-1 -- Linux kernel (EC2) vulnerabilities
Description:	linux-ec2: Linux kernel for EC2 Two security issues were fixed in the kernel.
Family:	unix	Class:	patch
Reference(s):	USN-1324-1 CVE-2011-2203 CVE-2011-4110	Version:	5
Platform(s):	Ubuntu 10.04	Product(s):	Linux
Definition Synopsis:
Ubuntu 10.04 is installed AND Installed architecture is all AND linux-image-2.6.32-342-ec2 DPKG is earlier than 2.6.32-342.43

Definition Id: oval:org.mitre.oval:def:15318

Oval ID:	oval:org.mitre.oval:def:15318
Title:	USN-1337-1 -- Linux kernel (Natty backport) vulnerabilities
Description:	linux-lts-backport-natty: Linux kernel backport from Natty Several security issues were fixed in the kernel.
Family:	unix	Class:	patch
Reference(s):	USN-1337-1 CVE-2011-1162 CVE-2011-2203 CVE-2011-4110	Version:	5
Platform(s):	Ubuntu 10.04	Product(s):	Linux
Definition Synopsis:
Ubuntu 10.04 is installed AND Installed architecture is all Packages section linux-image-2.6.38-13-virtual DPKG is earlier than 2.6.38-13.54~lucid1 AND linux-image-2.6.38-13-server DPKG is earlier than 2.6.38-13.54~lucid1 AND linux-image-2.6.38-13-generic-pae DPKG is earlier than 2.6.38-13.54~lucid1 AND linux-image-2.6.38-13-generic DPKG is earlier than 2.6.38-13.54~lucid1

Definition Id: oval:org.mitre.oval:def:15337

Oval ID:	oval:org.mitre.oval:def:15337
Title:	USN-1332-1 -- Linux kernel (Maverick backport) vulnerabilities
Description:	linux-lts-backport-maverick: Linux kernel backport from Maverick Several security issues were fixed in the kernel.
Family:	unix	Class:	patch
Reference(s):	USN-1332-1 CVE-2011-1162 CVE-2011-1759 CVE-2011-2182 CVE-2011-2203 CVE-2011-4110	Version:	5
Platform(s):	Ubuntu 10.04	Product(s):	Linux
Definition Synopsis:
Ubuntu 10.04 is installed AND Installed architecture is all Packages section linux-image-2.6.35-32-virtual DPKG is earlier than 2.6.35-32.64~lucid1 AND linux-image-2.6.35-32-server DPKG is earlier than 2.6.35-32.64~lucid1 AND linux-image-2.6.35-32-generic-pae DPKG is earlier than 2.6.35-32.64~lucid1 AND linux-image-2.6.35-32-generic DPKG is earlier than 2.6.35-32.64~lucid1

Definition Id: oval:org.mitre.oval:def:15353

Oval ID:	oval:org.mitre.oval:def:15353
Title:	USN-1325-1 -- Linux kernel (OMAP4) vulnerabilities
Description:	linux-ti-omap4: Linux kernel for OMAP4 Several security issues were fixed in the kernel.
Family:	unix	Class:	patch
Reference(s):	USN-1325-1 CVE-2011-1162 CVE-2011-2203 CVE-2011-3353 CVE-2011-3359 CVE-2011-4110	Version:	5
Platform(s):	Ubuntu 10.10	Product(s):	Linux
Definition Synopsis:
Ubuntu 10.10 is installed AND Installed architecture is all AND linux-image-2.6.35-903-omap4 DPKG is earlier than 2.6.35-903.29

Definition Id: oval:org.mitre.oval:def:15438

Oval ID:	oval:org.mitre.oval:def:15438
Title:	USN-1341-1 -- Linux kernel vulnerabilities
Description:	linux: Linux kernel Several security issues were fixed in the kernel.
Family:	unix	Class:	patch
Reference(s):	USN-1341-1 CVE-2011-1162 CVE-2011-1759 CVE-2011-2182 CVE-2011-2203 CVE-2011-4110	Version:	5
Platform(s):	Ubuntu 10.10	Product(s):	Linux
Definition Synopsis:
Ubuntu 10.10 is installed AND Installed architecture is all Packages section linux-image-2.6.35-32-powerpc DPKG is earlier than 2.6.35-32.64 AND linux-image-2.6.35-32-powerpc64-smp DPKG is earlier than 2.6.35-32.64 AND linux-image-2.6.35-32-generic-pae DPKG is earlier than 2.6.35-32.64 AND linux-image-2.6.35-32-versatile DPKG is earlier than 2.6.35-32.64 AND linux-image-2.6.35-32-generic DPKG is earlier than 2.6.35-32.64 AND linux-image-2.6.35-32-virtual DPKG is earlier than 2.6.35-32.64 AND linux-image-2.6.35-32-server DPKG is earlier than 2.6.35-32.64 AND linux-image-2.6.35-32-omap DPKG is earlier than 2.6.35-32.64 AND linux-image-2.6.35-32-powerpc-smp DPKG is earlier than 2.6.35-32.64

Definition Id: oval:org.mitre.oval:def:20706

Oval ID:	oval:org.mitre.oval:def:20706
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	The user_update function in security/keys/user_defined.c in the Linux kernel 2.6 allows local users to cause a denial of service (NULL pointer dereference and kernel oops) via vectors related to a user-defined key and "updating a negative key into a fully instantiated key."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4110	Version:	4
Platform(s):	VMWare ESX Server 4.1 VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX410-201208101-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208101-SG is not installed OR Patch ESX400-201209401-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201209401-SG is not installed

Definition Id: oval:org.mitre.oval:def:22198

Oval ID:	oval:org.mitre.oval:def:22198
Title:	RHSA-2011:1479: kernel security, bug fix, and enhancement update (Important)
Description:	The user_update function in security/keys/user_defined.c in the Linux kernel 2.6 allows local users to cause a denial of service (NULL pointer dereference and kernel oops) via vectors related to a user-defined key and "updating a negative key into a fully instantiated key."
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:1479-01 CESA-2011:1479 CVE-2011-1162 CVE-2011-1898 CVE-2011-2203 CVE-2011-2494 CVE-2011-3363 CVE-2011-4110	Version:	81
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	kernel
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section kernel-headers is earlier than 0:2.6.18-274.12.1.el5 AND kernel is earlier than 0:2.6.18-274.12.1.el5 AND kernel-doc is earlier than 0:2.6.18-274.12.1.el5 AND kernel-devel is earlier than 0:2.6.18-274.12.1.el5 AND kernel-kdump is earlier than 0:2.6.18-274.12.1.el5 AND kernel-xen-devel is earlier than 0:2.6.18-274.12.1.el5 AND kernel-debug is earlier than 0:2.6.18-274.12.1.el5 AND kernel-debug-devel is earlier than 0:2.6.18-274.12.1.el5 AND kernel-PAE is earlier than 0:2.6.18-274.12.1.el5 AND kernel-PAE-devel is earlier than 0:2.6.18-274.12.1.el5 AND kernel-kdump-devel is earlier than 0:2.6.18-274.12.1.el5 AND kernel-xen is earlier than 0:2.6.18-274.12.1.el5

Definition Id: oval:org.mitre.oval:def:23202

Oval ID:	oval:org.mitre.oval:def:23202
Title:	ELSA-2011:1479: kernel security, bug fix, and enhancement update (Important)
Description:	The user_update function in security/keys/user_defined.c in the Linux kernel 2.6 allows local users to cause a denial of service (NULL pointer dereference and kernel oops) via vectors related to a user-defined key and "updating a negative key into a fully instantiated key."
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:1479-01 CVE-2011-1162 CVE-2011-1898 CVE-2011-2203 CVE-2011-2494 CVE-2011-3363 CVE-2011-4110	Version:	29
Platform(s):	Oracle Linux 5	Product(s):	kernel
Definition Synopsis:
Oracle Linux 5.x rpm test kernel-headers is earlier than 0:2.6.18-274.12.1.el5 AND kernel is earlier than 0:2.6.18-274.12.1.el5 AND kernel-doc is earlier than 0:2.6.18-274.12.1.el5 AND kernel-devel is earlier than 0:2.6.18-274.12.1.el5 AND kernel-kdump is earlier than 0:2.6.18-274.12.1.el5 AND kernel-xen-devel is earlier than 0:2.6.18-274.12.1.el5 AND kernel-debug is earlier than 0:2.6.18-274.12.1.el5 AND kernel-debug-devel is earlier than 0:2.6.18-274.12.1.el5 AND kernel-PAE is earlier than 0:2.6.18-274.12.1.el5 AND kernel-PAE-devel is earlier than 0:2.6.18-274.12.1.el5 AND kernel-kdump-devel is earlier than 0:2.6.18-274.12.1.el5 AND kernel-xen is earlier than 0:2.6.18-274.12.1.el5

Definition Id: oval:org.mitre.oval:def:27217

Oval ID:	oval:org.mitre.oval:def:27217
Title:	RHSA-2011:1530 -- Red Hat Enterprise Linux 6 kernel security, bug fix and enhancement update (Moderate)
Description:	The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: * The proc file system could allow a local, unprivileged user to obtain sensitive information or possibly cause integrity issues. (CVE-2011-1020, Moderate) * Non-member VLAN (virtual LAN) packet handling for interfaces in promiscuous mode and also using the be2net driver could allow an attacker on the local network to cause a denial of service. (CVE-2011-3347, Moderate) * A flaw was found in the Linux kernel in the way splitting two extents in ext4_ext_convert_to_initialized() worked. A local, unprivileged user with access to mount and unmount ext4 file systems could use this flaw to cause a denial of service. (CVE-2011-3638, Moderate) * A NULL pointer dereference flaw was found in the way the Linux kernel's key management facility handled user-defined key types. A local, unprivileged user could use the keyctl utility to cause a denial of service. (CVE-2011-4110, Moderate) Red Hat would like to thank Kees Cook for reporting CVE-2011-1020; Somnath Kotur for reporting CVE-2011-3347; and Zheng Liu for reporting CVE-2011-3638. This update also fixes several hundred bugs and adds enhancements. Refer to the Red Hat Enterprise Linux 6.2 Release Notes for information on the most significant of these changes, and the Technical Notes for further information, both linked to in the References. All Red Hat Enterprise Linux 6 users are advised to install these updated packages, which correct these issues, and fix the bugs and add the enhancements noted in the Red Hat Enterprise Linux 6.2 Release Notes and Technical Notes. The system must be rebooted for this update to take effect.
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:1530 CVE-2011-1020 CVE-2011-3347 CVE-2011-3638 CVE-2011-4110	Version:	3
Platform(s):	Red Hat Enterprise Linux 6	Product(s):	kernel
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 6 Packages match section kernel is earlier than 0:2.6.32-220.el6 AND kernel-debug is earlier than 0:2.6.32-220.el6 AND kernel-debug-debuginfo is earlier than 0:2.6.32-220.el6 AND kernel-debug-devel is earlier than 0:2.6.32-220.el6 AND kernel-debuginfo is earlier than 0:2.6.32-220.el6 AND kernel-debuginfo-common-i686 is earlier than 0:2.6.32-220.el6 AND kernel-devel is earlier than 0:2.6.32-220.el6 AND kernel-doc is earlier than 0:2.6.32-220.el6 AND kernel-firmware is earlier than 0:2.6.32-220.el6 AND kernel-headers is earlier than 0:2.6.32-220.el6 AND perf is earlier than 0:2.6.32-220.el6 AND perf-debuginfo is earlier than 0:2.6.32-220.el6 AND python-perf is earlier than 0:2.6.32-220.el6 AND kernel-debuginfo-common-x86_64 is earlier than 0:2.6.32-220.el6

Definition Id: oval:org.mitre.oval:def:27741

Oval ID:	oval:org.mitre.oval:def:27741
Title:	DEPRECATED: ELSA-2011-1479 -- kernel security, bug fix, and enhancement update (important)
Description:	kernel [2.6.18-274.12.1.0.1.el5] - fix ia64 build error due to add-support-above-32-vcpus.patch(Zhenzhong Duan) - [x86] use dynamic vcpu_info remap to support more than 32 vcpus (Zhenzhong Duan) - [scsi] add additional scsi medium error handling (John Sobecki) [orabug 12904887] - [x86] Fix lvt0 reset when hvm boot up with noapic param - [scsi] remove printk's when doing I/O to a dead device (John Sobecki, Chris Mason) [orabug 12342275] - [char] ipmi: Fix IPMI errors due to timing problems (Joe Jin) [orabug 12561346] - [scsi] Fix race when removing SCSI devices (Joe Jin) [orabug 12404566] - bonding: reread information about speed and duplex when interface goes up (John Haxby) [orabug 11890822] - [fs] nfs: Fix __put_nfs_open_context() NULL pointer panic (Joe Jin) [orabug 12687646] - [scsi] fix scsi hotplug and rescan race [orabug 10260172] - fix filp_close() race (Joe Jin) [orabug 10335998] - make xenkbd.abs_pointer=1 by default [orabug 67188919] - [xen] check to see if hypervisor supports memory reservation change (Chuck Anderson) [orabug 7556514] - [net] Enable entropy for bnx2,bnx2x,e1000e,igb,ixgb,ixgbe,ixgbevf (John Sobecki) [orabug 10315433] - [NET] Add xen pv netconsole support (Tina Yang) [orabug 6993043] [bz 7258] - [mm] shrink_zone patch (John Sobecki,Chris Mason) [orabug 6086839] - fix aacraid not to reset during kexec (Joe Jin) [orabug 8516042] - [rds] Patch rds to 1.4.2-20 (Andy Grover) [orabug 9471572, 9344105] RDS: Fix BUG_ONs to not fire when in a tasklet ipoib: Fix lockup of the tx queue RDS: Do not call set_page_dirty() with irqs off (Sherman Pun) RDS: Properly unmap when getting a remote access error (Tina Yang) RDS: Fix locking in rds_send_drop_to() - [xen] PVHVM guest with PoD crashes under memory pressure (Chuck Anderson) [orabug 9107465] - [xen] PV guest with FC HBA hangs during shutdown (Chuck Anderson) [orabug 9764220] - Support 256GB+ memory for pv guest (Mukesh Rathor) [orabug 9450615] - fix overcommit memory to use percpu_counter for el5 (KOSAKI Motohiro, Guru Anbalagane) [orabug 6124033] - [ipmi] make configurable timeouts for kcs of ipmi [orabug 9752208] - [ib] fix memory corruption (Andy Grover) [orabug 9972346] - [aio] patch removes limit on number of retries (Srinivas Eeda) [orabug 10044782] - [loop] Do not call loop_unplug for not configured loop device (orabug 10314497)
Family:	unix	Class:	patch
Reference(s):	ELSA-2011-1479 CVE-2011-1162 CVE-2011-1898 CVE-2011-2203 CVE-2011-2494 CVE-2011-3363 CVE-2011-4110	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	kernel
Definition Synopsis:
Oracle Linux 5.x Packages match section kernel is earlier than 0:2.6.18-274.12.1.0.1.el5 AND ocfs2 is earlier than 0:2.6.18-274.12.1.0.1.el5-1.4.9-1.el5 AND oracleasm is earlier than 0:2.6.18-274.12.1.0.1.el5-2.0.5-1.el5 AND kernel-PAE is earlier than 0:2.6.18-274.12.1.0.1.el5 AND kernel-PAE-devel is earlier than 0:2.6.18-274.12.1.0.1.el5 AND kernel-debug is earlier than 0:2.6.18-274.12.1.0.1.el5 AND kernel-debug-devel is earlier than 0:2.6.18-274.12.1.0.1.el5 AND kernel-devel is earlier than 0:2.6.18-274.12.1.0.1.el5 AND kernel-doc is earlier than 0:2.6.18-274.12.1.0.1.el5 AND kernel-headers is earlier than 0:2.6.18-274.12.1.0.1.el5 AND kernel-xen is earlier than 0:2.6.18-274.12.1.0.1.el5 AND kernel-xen-devel is earlier than 0:2.6.18-274.12.1.0.1.el5 AND ocfs2 is earlier than 0:2.6.18-274.12.1.0.1.el5PAE-1.4.9-1.el5 AND ocfs2 is earlier than 0:2.6.18-274.12.1.0.1.el5debug-1.4.9-1.el5 AND ocfs2 is earlier than 0:2.6.18-274.12.1.0.1.el5xen-1.4.9-1.el5 AND oracleasm is earlier than 0:2.6.18-274.12.1.0.1.el5PAE-2.0.5-1.el5 AND oracleasm is earlier than 0:2.6.18-274.12.1.0.1.el5debug-2.0.5-1.el5 AND oracleasm is earlier than 0:2.6.18-274.12.1.0.1.el5xen-2.0.5-1.el5

Definition Id: oval:org.mitre.oval:def:27801

Oval ID:	oval:org.mitre.oval:def:27801
Title:	ELSA-2011-1530 -- Oracle Linux 6 kernel security, bug fix and enhancement update (moderate)
Description:	[2.6.32-220.el6] - [drm] i915: fix unmap race condition introduced with VT-d fix (Dave Airlie) [750583] - [scsi] iscsi: revert lockless queuecommand dispatch (Rob Evers) [751426]
Family:	unix	Class:	patch
Reference(s):	ELSA-2011-1530 CVE-2011-1020 CVE-2011-3347 CVE-2011-3638 CVE-2011-4110	Version:	3
Platform(s):	Oracle Linux 6	Product(s):	kernel
Definition Synopsis:
Oracle Linux 6.x Packages match section kernel is earlier than 0:2.6.32-220.el6 AND kernel-debug is earlier than 0:2.6.32-220.el6 AND kernel-debug-devel is earlier than 0:2.6.32-220.el6 AND kernel-devel is earlier than 0:2.6.32-220.el6 AND kernel-doc is earlier than 0:2.6.32-220.el6 AND kernel-firmware is earlier than 0:2.6.32-220.el6 AND kernel-headers is earlier than 0:2.6.32-220.el6 AND perf is earlier than 0:2.6.32-220.el6 AND python-perf is earlier than 0:2.6.32-220.el6

CPE : Common Platform Enumeration

Type	Description	Count
Os	Linux Linux Kernel cpe:2.3:o:linux:linux_kernel:2.6:::::::*	1

OpenVAS Exploits

Date	Description
2013-09-18	Name : Debian Security Advisory DSA 2389-1 (linux-2.6 - privilege escalation/denial ... File : nvt/deb_2389_1.nasl
2012-08-31	Name : VMSA-2012-0013 VMware vSphere and vCOps updates to third party libraries. File : nvt/gb_VMSA-2012-0013.nasl
2012-07-30	Name : CentOS Update for kernel CESA-2011:1479 centos5 x86_64 File : nvt/gb_CESA-2011_1479_kernel_centos5_x86_64.nasl
2012-07-09	Name : RedHat Update for Red Hat Enterprise Linux 6 kernel RHSA-2011:1530-03 File : nvt/gb_RHSA-2011_1530-03_Red_Hat_Enterprise_Linux_6_kernel.nasl
2012-04-02	Name : Fedora Update for kernel FEDORA-2011-16237 File : nvt/gb_fedora_2011_16237_kernel_fc16.nasl
2012-03-16	Name : Ubuntu Update for linux-ti-omap4 USN-1330-1 File : nvt/gb_ubuntu_USN_1330_1.nasl
2012-03-16	Name : Ubuntu Update for linux USN-1322-1 File : nvt/gb_ubuntu_USN_1322_1.nasl
2012-01-25	Name : Ubuntu Update for linux USN-1344-1 File : nvt/gb_ubuntu_USN_1344_1.nasl
2012-01-25	Name : Ubuntu Update for linux USN-1341-1 File : nvt/gb_ubuntu_USN_1341_1.nasl
2012-01-25	Name : Ubuntu Update for linux-lts-backport-oneiric USN-1340-1 File : nvt/gb_ubuntu_USN_1340_1.nasl
2012-01-25	Name : Ubuntu Update for linux-lts-backport-natty USN-1337-1 File : nvt/gb_ubuntu_USN_1337_1.nasl
2012-01-25	Name : Ubuntu Update for linux USN-1345-1 File : nvt/gb_ubuntu_USN_1345_1.nasl
2012-01-16	Name : Ubuntu Update for linux-mvl-dove USN-1328-1 File : nvt/gb_ubuntu_USN_1328_1.nasl
2012-01-16	Name : Ubuntu Update for linux-lts-backport-maverick USN-1332-1 File : nvt/gb_ubuntu_USN_1332_1.nasl
2012-01-13	Name : Ubuntu Update for linux USN-1323-1 File : nvt/gb_ubuntu_USN_1323_1.nasl
2012-01-13	Name : Ubuntu Update for linux-ec2 USN-1324-1 File : nvt/gb_ubuntu_USN_1324_1.nasl
2012-01-13	Name : Ubuntu Update for linux-ti-omap4 USN-1325-1 File : nvt/gb_ubuntu_USN_1325_1.nasl
2012-01-09	Name : Ubuntu Update for linux-ti-omap4 USN-1319-1 File : nvt/gb_ubuntu_USN_1319_1.nasl
2012-01-09	Name : Ubuntu Update for linux-fsl-imx51 USN-1318-1 File : nvt/gb_ubuntu_USN_1318_1.nasl
2011-12-12	Name : Fedora Update for kernel FEDORA-2011-16621 File : nvt/gb_fedora_2011_16621_kernel_fc15.nasl
2011-12-02	Name : CentOS Update for kernel CESA-2011:1479 centos5 i386 File : nvt/gb_CESA-2011_1479_kernel_centos5_i386.nasl
2011-12-02	Name : Fedora Update for kernel FEDORA-2011-16346 File : nvt/gb_fedora_2011_16346_kernel_fc14.nasl
2011-12-02	Name : RedHat Update for kernel RHSA-2011:1479-01 File : nvt/gb_RHSA-2011_1479-01_kernel.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
77450	Linux Kernel security/keys/user_defined.c user_update() Function NULL Pointer...

Information Assurance Vulnerability Management (IAVM)

Date	Description
2012-09-27	IAVM : 2012-A-0153 - Multiple Vulnerabilities in VMware ESX 4.0 and ESXi 4.0 Severity : Category I - VMSKEY : V0033884
2012-09-13	IAVM : 2012-B-0086 - VMware vCenter Operations Arbitrary File Overwrite Vulnerability Severity : Category I - VMSKEY : V0033791
2012-09-13	IAVM : 2012-A-0146 - Multiple Vulnerabilities in VMware vCenter Update Manager 4.1 Severity : Category I - VMSKEY : V0033792
2012-09-13	IAVM : 2012-A-0147 - Multiple Vulnerabilities in VMware vCenter Server 4.1 Severity : Category I - VMSKEY : V0033793
2012-09-13	IAVM : 2012-A-0148 - Multiple Vulnerabilities in VMware ESXi 4.1 and ESX 4.1 Severity : Category I - VMSKEY : V0033794

Nessus® Vulnerability Scanner

Date	Description
2016-02-29	Name : The remote VMware ESX / ESXi host is missing a security-related patch. File : vmware_VMSA-2012-0013_remote.nasl - Type : ACT_GATHER_INFO
2015-05-20	Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2013-1832-1.nasl - Type : ACT_GATHER_INFO
2015-05-20	Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2012-1391-1.nasl - Type : ACT_GATHER_INFO
2014-11-26	Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2013-0039.nasl - Type : ACT_GATHER_INFO
2014-07-22	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-0566.nasl - Type : ACT_GATHER_INFO
2014-07-22	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-0333.nasl - Type : ACT_GATHER_INFO
2014-07-22	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-0010.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2012-756.nasl - Type : ACT_GATHER_INFO
2013-11-13	Name : The remote VMware ESXi 5.0 host is affected by multiple vulnerabilities. File : vmware_esxi_5_0_build_912577_remote.nasl - Type : ACT_GATHER_INFO
2013-09-04	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2011-26.nasl - Type : ACT_GATHER_INFO
2013-07-29	Name : The remote host has a virtualization appliance installed that is affected by ... File : vcenter_operations_manager_vmsa_2012-0013.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2011-1479.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2011-2037.nasl - Type : ACT_GATHER_INFO
2013-06-29	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2011-1479.nasl - Type : ACT_GATHER_INFO
2013-06-17	Name : The remote host has an update manager installed that is affected by multiple ... File : vmware_vcenter_update_mgr_vmsa-2012-0013.nasl - Type : ACT_GATHER_INFO
2013-06-05	Name : The remote host has a virtualization management application installed that is... File : vmware_vcenter_vmsa-2012-0013.nasl - Type : ACT_GATHER_INFO
2013-01-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-0116.nasl - Type : ACT_GATHER_INFO
2012-10-24	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_kernel-8324.nasl - Type : ACT_GATHER_INFO
2012-10-24	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_kernel-8325.nasl - Type : ACT_GATHER_INFO
2012-08-31	Name : The remote VMware ESXi / ESX host is missing one or more security-related pat... File : vmware_VMSA-2012-0013.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20111129_kernel_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20111206_Scientific_Linux_6_kernel_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2012-02-07	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_kernel-120129.nasl - Type : ACT_GATHER_INFO
2012-02-07	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_kernel-120130.nasl - Type : ACT_GATHER_INFO
2012-01-25	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1345-1.nasl - Type : ACT_GATHER_INFO
2012-01-25	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1344-1.nasl - Type : ACT_GATHER_INFO
2012-01-24	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1341-1.nasl - Type : ACT_GATHER_INFO
2012-01-24	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1340-1.nasl - Type : ACT_GATHER_INFO
2012-01-24	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1336-1.nasl - Type : ACT_GATHER_INFO
2012-01-24	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1337-1.nasl - Type : ACT_GATHER_INFO
2012-01-18	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2389.nasl - Type : ACT_GATHER_INFO
2012-01-13	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1330-1.nasl - Type : ACT_GATHER_INFO
2012-01-13	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-1328-1.nasl - Type : ACT_GATHER_INFO
2012-01-13	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1332-1.nasl - Type : ACT_GATHER_INFO
2012-01-12	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1325-1.nasl - Type : ACT_GATHER_INFO
2012-01-12	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-1324-1.nasl - Type : ACT_GATHER_INFO
2012-01-12	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1323-1.nasl - Type : ACT_GATHER_INFO
2012-01-10	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1322-1.nasl - Type : ACT_GATHER_INFO
2012-01-06	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1319-1.nasl - Type : ACT_GATHER_INFO
2012-01-06	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1318-1.nasl - Type : ACT_GATHER_INFO
2011-12-12	Name : The remote Fedora host is missing a security update. File : fedora_2011-16621.nasl - Type : ACT_GATHER_INFO
2011-12-06	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-1530.nasl - Type : ACT_GATHER_INFO
2011-11-30	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-1479.nasl - Type : ACT_GATHER_INFO
2011-11-29	Name : The remote Fedora host is missing a security update. File : fedora_2011-16346.nasl - Type : ACT_GATHER_INFO
2011-11-26	Name : The remote Fedora host is missing a security update. File : fedora_2011-16237.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

http://marc.info/?l=bugtraq&m=139447903326211&w=2
http://secunia.com/advisories/47754
http://www.openwall.com/lists/oss-security/2011/11/21/19
http://www.openwall.com/lists/oss-security/2011/11/22/5
http://www.openwall.com/lists/oss-security/2011/11/22/6
http://www.securityfocus.com/bid/50755
http://www.ubuntu.com/usn/USN-1324-1
http://www.ubuntu.com/usn/USN-1328-1
http://www.ubuntu.com/usn/USN-1344-1
https://bugzilla.redhat.com/show_bug.cgi?id=751297
https://lkml.org/lkml/2011/11/15/363

Source	Url

Alert History

If you want to see full details history, please login or register.

Date	Informations
2024-11-28 23:03:01	Multiple Updates
2024-11-28 12:27:39	Multiple Updates
2023-02-13 09:28:53	Multiple Updates
2023-02-03 00:28:46	Multiple Updates
2021-05-04 12:17:47	Multiple Updates
2021-04-22 01:21:05	Multiple Updates
2020-05-23 00:32:08	Multiple Updates
2016-08-23 09:24:44	Multiple Updates
2016-04-26 21:12:18	Multiple Updates
2016-03-01 13:26:32	Multiple Updates
2015-05-21 13:29:22	Multiple Updates
2014-11-27 13:27:59	Multiple Updates
2014-07-23 13:24:39	Multiple Updates
2014-06-14 13:31:54	Multiple Updates
2014-02-17 11:05:59	Multiple Updates
2013-11-11 12:39:38	Multiple Updates
2013-09-20 17:21:09	Multiple Updates
2013-05-10 23:10:05	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	1
Oval ID(s)	17
CPE ID(s)	1
Sources(s)	11
osvdb(s)	1
Openvas Exploit(s)	23
IAVM(s)	5
Nessus® Exploit(s)	45

	Related
10	RHSA-2012:0010
9.3	VMSA-2012-0013
7.8	RHSA-2012:0333
7.4	RHSA-2011:1479
7.2	USN-1340-1
7.2	USN-1330-1
7.2	USN-1322-1
6.9	DSA-2389
5.4	USN-1325-1
5.4	USN-1323-1
4.9	USN-1319-1
4.9	RHSA-2012:0116
2.1	USN-1345-1
2.1	USN-1344-1
2.1	USN-1341-1
2.1	USN-1337-1
2.1	USN-1332-1
2.1	USN-1328-1
2.1	USN-1324-1
2.1	USN-1318-1
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 20 more Alert(s)

2.1 - CVE-2011-4110

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

OVAL Definitions

CPE : Common Platform Enumeration

OpenVAS Exploits

Open Source Vulnerability Database (OSVDB)

Information Assurance Vulnerability Management (IAVM)

Nessus® Vulnerability Scanner

Sources (Detail)

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU