CVE-2001-1391

MediumCVSS 5.5/10Last modified Jun 16, 2026

Description

Off-by-one vulnerability in CPIA driver of Linux kernel before 2.2.19 allows users to modify kernel memory.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-193

Affected software

No affected versions have been published.

Timeline

Published
Apr 17, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2001

CVE-2001-13922.1The Linux kernel before 2.2.19 does not have unregister calls for (1) CPUID and (2) MSR drivers, which could cause a DoS (crash) by unloadinCVE-2001-13932.1Unknown vulnerability in classifier code for Linux kernel before 2.2.19 could result in denial of service (hang).CVE-2001-13942.1Signedness error in (1) getsockopt and (2) setsockopt for Linux kernel before 2.2.19 allows local users to cause a denial of service.CVE-2001-13953.6Unknown vulnerability in sockfilter for Linux kernel before 2.2.19 related to "boundary cases," with unknown impact.CVE-2001-13963.6Unknown vulnerabilities in strnlen_user for Linux kernel before 2.2.19, with unknown impact.CVE-2001-13972.1The System V (SYS5) shared memory implementation for Linux kernel before 2.2.19 could allow attackers to modify recently freed memory.CVE-2001-13987.5Masquerading code for Linux kernel before 2.2.19 does not fully check packet lengths in certain cases, which may lead to a vulnerability.CVE-2001-13992.1Certain operations in Linux kernel before 2.2.19 on the x86 architecture copy the wrong number of bytes, which might allow attackers to modiCVE-2001-14002.1Unknown vulnerabilities in the UDP port allocation for Linux kernel before 2.2.19 could allow local users to cause a denial of service (deadCVE-2001-14017.5Bugzilla before 2.14 does not properly restrict access to confidential bugs, which could allow Bugzilla users to bypass viewing permissions CVE-2001-14027.5Bugzilla before 2.14 does not properly escape untrusted parameters, which could allow remote attackers to conduct unauthorized activities viCVE-2001-14037.5Bugzilla before 2.14 includes the username and password in URLs, which could allow attackers to gain privileges by reading the information f
CVE-2001-1391: Medium severity, CVSS 5.5 | Vulnix