CVE-2011-2700

Priority
Description
Multiple buffer overflows in the si4713_write_econtrol_string function in
drivers/media/radio/si4713-i2c.c in the Linux kernel before 2.6.39.4 on the
N900 platform might allow local users to cause a denial of service or have
unspecified other impact via a crafted s_ext_ctrls operation with a (1)
V4L2_CID_RDS_TX_PS_NAME or (2) V4L2_CID_RDS_TX_RADIO_TEXT control ID.
Ubuntu-Description
Mauro Carvalho Chehab discovered that the si4713 radio driver did not
correctly check the length of memory copies. If this hardware was
available, a local attacker could exploit this to crash the system or gain
root privileges.
Notes
Package
Source: linux (LP Ubuntu Debian)
Upstream:released (3.0)
Ubuntu 14.04 ESM (Trusty Tahr):not-affected (3.11.0-12.19)
Patches:
Introduced by
02bee89e79b1302776e32214b8ca96a00c70c446
Fixed by
dc6b845044ccb7e9e6f3b7e71bd179b3cf0223b6
Package
Upstream:released (3.0)
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Package
Upstream:released (3.0)
Ubuntu 14.04 ESM (Trusty Tahr):DNE (trusty was not-affected [3.4.0-1.3])
Package
Upstream:released (3.0)
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Package
Upstream:released (3.0)
Ubuntu 14.04 ESM (Trusty Tahr):DNE (trusty was not-affected [3.4.0-1.7])
Package
Upstream:released (3.0)
Ubuntu 14.04 ESM (Trusty Tahr):DNE (trusty was not-affected [3.1.10-8.28])
Package
Upstream:released (3.0)
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Package
Upstream:released (3.0)
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Package
Upstream:released (3.0)
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Package
Upstream:released (3.0)
Ubuntu 14.04 ESM (Trusty Tahr):DNE (trusty was not-affected [3.0.0-3.18])
Package
Upstream:released (3.0)
Ubuntu 14.04 ESM (Trusty Tahr):DNE (trusty was not-affected [3.4.0-3.21])
Package
Upstream:released (3.0)
Ubuntu 14.04 ESM (Trusty Tahr):DNE (trusty was not-affected [3.4.0-4.19])
Package
Upstream:released (3.0)
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Package
Upstream:released (3.0)
Ubuntu 14.04 ESM (Trusty Tahr):DNE
More Information

Updated: 2019-12-05 20:57:25 UTC (commit 0aa5e7c87c8b55d2ec5c7f4ca1179cf75de91961)