CVE-2011-3619

Published Jun 8, 2013 CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Description
The apparmor_setprocattr function in security/apparmor/lsm.c in the Linux kernel before 3.0 does not properly handle invalid parameters, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact by writing to a /proc/#####/attr/current file.

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2011-3578 The apparmor_setprocattr function in security/apparmor/lsm.c in the Linux kernel before 3.0 does not properly handle invalid parameters, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact by writing to a /proc/#####/attr/current file.
Ubuntu USN Ubuntu USN USN-1193-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1256-1 Linux kernel (Natty backport) vulnerabilities
Ubuntu USN Ubuntu USN USN-1379-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1383-1 Linux kernel (OMAP4) vulnerabilities
Ubuntu USN Ubuntu USN USN-1387-1 Linux kernel (Maverick backport) vulnerabilities
Ubuntu USN Ubuntu USN USN-1394-1 linux-ti-omap4 vulnerabilities
History

No history.

Weaknesses
  • CWE-20

    Improper Input Validation

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 11:37 PM
Reserved
Sep 21, 2011, 12:00 AM
Status
Modified
Published
Jun 8, 2013, 1:05 PM
Modified
Jun 16, 2026, 11:33 PM