CVE-2011-1080

The do_replace function in net/bridge/netfilter/ebtables.c in the Linux kernel before 2.6.39 does not ensure that a certain name field ends with a '\0'…

published June 21, 2012

CVSS
—
EPSS
0%
Percentile
27.2
In the wild
Unconfirmed
What it is

The do_replace function in net/bridge/netfilter/ebtables.c in the Linux kernel before 2.6.39 does not ensure that a certain name field ends with a '\0' character, which allows local users to obtain potentially sensitive information from kernel stack memory by leveraging the CAP_NET_ADMIN capability to replace a table, and then reading a modprobe command line.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00350 · 27.2th percentile
Published
2012-06-21T23:00Z
EPSS history
Timeline
  • 21 JUN 23:00Z
    The do_replace function in net/bridge/netfilter/ebtables.c in the Linux kernel before 2.6.39 does not ensure that a certain name field ends with a '\0'…
    cvelistv5