Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2011-1170

EPSS 0.08% · P25
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2011-1170

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
net/ipv4/netfilter/arp_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability to issue a crafted request, and then reading the argument to the resulting modprobe process.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux Kernel IPv4实现net/ipv4/netfilter/ip_tables.c信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。 Linux kernel 2.6.39之前版本的IPv4实现中的net/ipv4/netfilter/ip_tables.c不能在某些结构体成员值的字符串数据末端放置''字符。本地用户可利用CAP_NET_ADMIN功能发送特制的请求，从内核内存中获取潜在敏感信息，并且读取生成modprobe程序的参数。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2011-1170

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2011-1170

Please Login to view more intelligence information

Same Patch Batch · n/a · 2011-06-22 · 13 CVEs total

CVE-2011-2534Linux Kernel net/ipv4/netfilter/ipt_CLUSTERIP.c clusterip_proc_write函数缓冲区错误漏洞
CVE-2011-2533Freedesktop D-Bus安装脚本任意文件重写漏洞
CVE-2011-1171Linux kernel IPv4实现net/ipv4/netfilter/ip_tables.c信息泄露漏洞
CVE-2011-1172Linux Kernel IPv6实现net/ipv6/netfilter/ip6_tables.c信息泄露漏洞
CVE-2011-1173Linux Kernel Acorn Econet协议实现信息泄露漏洞
CVE-2011-1330KBS WeblyGo跨站脚本攻击漏洞
CVE-2011-2200Freedesktop D-Bus dbus-marshal-header.c _dbus_header_byteswap函数输入验证漏洞
CVE-2011-2206Brad Fitzpatrick DJabberd XMLParser.pm资源管理错误漏洞
CVE-2011-2205Prosody嵌入XML实体拒绝服务漏洞
CVE-2011-2530Rockwell AutomationRSLinx Classic RSHWare.exe RSEds.dll缓冲区溢出漏洞
CVE-2011-2531Prosody拒绝服务漏洞
CVE-2011-2532Prosody util/json.lua json.decode函数拒绝服务漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2011-1170

No comments yet

Leave a comment