CVE-2011-2517
Priority
Medium
Description
Multiple buffer overflows in net/wireless/nl80211.c in the Linux kernel
before 2.6.39.2 allow local users to gain privileges by leveraging the
CAP_NET_ADMIN capability during scan operations with a long SSID value.
before 2.6.39.2 allow local users to gain privileges by leveraging the
CAP_NET_ADMIN capability during scan operations with a long SSID value.
Ubuntu-Description
It was discovered that the wireless stack incorrectly verified SSID
lengths. A local attacker could exploit this to cause a denial of service
or gain root privileges.
lengths. A local attacker could exploit this to cause a denial of service
or gain root privileges.
References
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2517
https://rhn.redhat.com/errata/RHSA-2011-1212.html
http://www.ubuntu.com/usn/usn-1241-1
http://www.ubuntu.com/usn/usn-1244-1
http://www.ubuntu.com/usn/usn-1269-1
http://www.ubuntu.com/usn/usn-1272-1
http://www.ubuntu.com/usn/usn-1274-1
http://www.ubuntu.com/usn/usn-1272-1
http://www.ubuntu.com/usn/usn-1278-1
http://www.ubuntu.com/usn/usn-1279-1
http://www.ubuntu.com/usn/usn-1281-1
http://www.ubuntu.com/usn/usn-1285-1
http://www.ubuntu.com/usn/usn-1286-1
https://rhn.redhat.com/errata/RHSA-2011-1212.html
http://www.ubuntu.com/usn/usn-1241-1
http://www.ubuntu.com/usn/usn-1244-1
http://www.ubuntu.com/usn/usn-1269-1
http://www.ubuntu.com/usn/usn-1272-1
http://www.ubuntu.com/usn/usn-1274-1
http://www.ubuntu.com/usn/usn-1272-1
http://www.ubuntu.com/usn/usn-1278-1
http://www.ubuntu.com/usn/usn-1279-1
http://www.ubuntu.com/usn/usn-1281-1
http://www.ubuntu.com/usn/usn-1285-1
http://www.ubuntu.com/usn/usn-1286-1
Package
| Upstream: | released (3.0~rc3) |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | not-affected (3.2.0-1600.1) |
| Ubuntu 12.10 (Quantal Quetzal): | not-affected (3.2.0-1602.5) |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.0~rc3) |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (2.6.32-340.40) |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.0~rc3) |
| Ubuntu 10.04 LTS (Lucid Lynx): | not-affected |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.0~rc3) |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (2.6.38-13.52~lucid1) |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | not-affected |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Patches:
Package
| Upstream: | released (3.0~rc3) |
| Ubuntu 10.04 LTS (Lucid Lynx): | pending (2.6.32-220.38) |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.0~rc3) |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (2.6.35-31.62~lucid1) |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.0~rc3) |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (2.6.32-36.79) |
| Ubuntu 12.04 LTS (Precise Pangolin): | not-affected (3.0-1.2) |
| Ubuntu 12.10 (Quantal Quetzal): | not-affected (3.0-1.2) |
| Ubuntu 13.04 (Raring Ringtail): | not-affected (3.0-1.2) |
| Ubuntu 13.10 (Saucy Salamander): | not-affected (3.0-1.2) |
Patches:
| Introduced by 2a5193119269062608582418deba7af82844159a | Fixed by 208c72f4fe44fe09577e7975ba0e7fa0278f3d03 |
| Introduced by 2a5193119269062608582418deba7af82844159a | Fixed by 57a27e1d6a3bb9ad4efeebd3a8c71156d6207536 |
Package
| Upstream: | released (3.0~rc3) |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | not-affected (3.0.0-1200.1) |
| Ubuntu 12.10 (Quantal Quetzal): | not-affected (3.0.0-1200.1) |
| Ubuntu 13.04 (Raring Ringtail): | not-affected (3.0.0-1200.1) |
| Ubuntu 13.10 (Saucy Salamander): | not-affected (3.0.0-1200.1) |
Package
| Upstream: | released (3.0~rc3) |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (2.6.31-611.29) |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.0~rc3) |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | not-affected |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |