CVE-2011-1173

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

The econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.39 on the x86_64 platform allows remote attackers to obtain potentially sensitive information from kernel stack memory by reading uninitialized data in the ah field of an Acorn Universal Networking (AUN) packet.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=67c5c6cb8129c595f21e88254a3fc6b3b841ae8e
http://marc.info/?l=linux-netdev&m=130036203528021&w=2Patch, Third Party Advisory
http://securityreason.com/securityalert/8279Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39Release Notes, Vendor Advisory
http://www.openwall.com/lists/oss-security/2011/03/18/15Mailing List, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2011/03/21/1Mailing List, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2011/03/21/4Mailing List, Patch, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=591815#c14Issue Tracking, Third Party Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=67c5c6cb8129c595f21e88254a3fc6b3b841ae8e
http://marc.info/?l=linux-netdev&m=130036203528021&w=2Patch, Third Party Advisory
http://securityreason.com/securityalert/8279Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39Release Notes, Vendor Advisory
http://www.openwall.com/lists/oss-security/2011/03/18/15Mailing List, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2011/03/21/1Mailing List, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2011/03/21/4Mailing List, Patch, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=591815#c14Issue Tracking, Third Party Advisory

Timeline

Published: Jun 22, 2011
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2011

CVE-2011-11745.0manager.c in Asterisk Open Source 1.6.1.x before 1.6.1.24, 1.6.2.x before 1.6.2.17.2, and 1.8.x before 1.8.3.2 allows remote attackers to ca CVE-2011-11755.0tcptls.c in the TCP/TLS server in Asterisk Open Source 1.6.1.x before 1.6.1.23, 1.6.2.x before 1.6.2.17.1, and 1.8.x before 1.8.3.1 allows r CVE-2011-11764.3The configuration merger in itk.c in the Steinar H. Gunderson mpm-itk Multi-Processing Module 2.2.11-01 and 2.2.11-02 for the Apache HTTP Se CVE-2011-11786.8Multiple integer overflows in the load_image function in file-pcx.c in the Personal Computer Exchange (PCX) plugin in GIMP 2.6.x and earlier CVE-2011-11795.1The SPICE Firefox plug-in (spice-xpi) 2.4, 2.3, 2.2, and possibly other versions allows remote attackers to cause a denial of service (crash CVE-2011-11809.8Multiple stack-based buffer overflows in the iriap_getvaluebyclass_indication function in net/irda/iriap.c in the Linux kernel before 2.6.39 CVE-2011-11823.6kernel/signal.c in the Linux kernel before 2.6.39 allows local users to spoof the uid and pid of a signal sender via a sigqueueinfo system c CVE-2011-11835.8Apache Tomcat 7.0.11, when web.xml has no login configuration, does not follow security constraints, which allows remote attackers to bypass CVE-2011-11845.0The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not CVE-2011-11857.5Google Chrome before 10.0.648.127 does not prevent (1) navigation and (2) close operations on the top location of a sandboxed frame, which h CVE-2011-11865.0Google Chrome before 10.0.648.127 on Linux does not properly handle parallel execution of calls to the print method, which might allow remot CVE-2011-11875.0Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error mes