CVE-2011-3191

HighCVSS 8.8/10Last modified Jun 16, 2026

Description

Integer signedness error in the CIFSFindNext function in fs/cifs/cifssmb.c in the Linux kernel before 3.1 allows remote CIFS servers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a large length value in a response to a read request for a directory.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9438fabb73eb48055b58b89fc51e0bc4db22fabd
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1Mailing List, Patch, Vendor Advisory
http://www.openwall.com/lists/oss-security/2011/08/24/2Mailing List, Patch, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=732869Issue Tracking, Patch, Third Party Advisory
https://github.com/torvalds/linux/commit/9438fabb73eb48055b58b89fc51e0bc4db22fabdPatch, Third Party Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9438fabb73eb48055b58b89fc51e0bc4db22fabd
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1Mailing List, Patch, Vendor Advisory
http://www.openwall.com/lists/oss-security/2011/08/24/2Mailing List, Patch, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=732869Issue Tracking, Patch, Third Party Advisory
https://github.com/torvalds/linux/commit/9438fabb73eb48055b58b89fc51e0bc4db22fabdPatch, Third Party Advisory

Timeline

Published: May 24, 2012
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2011

CVE-2011-31927.8The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a deni CVE-2011-31939.3Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango CVE-2011-31949.3Buffer overflow in the TIFF reader in gui/image/qtiffhandler.cpp in Qt 4.7.4 allows remote attackers to cause a denial of service (crash) an CVE-2011-31956.5shared/inc/sql/lists.php in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated users to execute arbitrary commands v CVE-2011-31962.1The setup script in Domain Technologie Control (DTC) before 0.34.1 uses world-readable permissions for /etc/apache2/apache2.conf, which allo CVE-2011-31976.5SQL injection vulnerability in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated users to execute arbitrary SQL com CVE-2011-31982.1Domain Technologie Control (DTC) before 0.34.1 includes a password in the -b command line argument to htpasswd, which might allow local user CVE-2011-31993.5Multiple cross-site scripting (XSS) vulnerabilities in Domain Technologie Control (DTC) before 0.34.1 allow remote authenticated users to in CVE-2011-32005.0Stack-based buffer overflow in the parseLegacySyslogMsg function in tools/syslogd.c in rsyslogd in rsyslog 4.6.x before 4.6.8 and 5.2.0 thro CVE-2011-32014.3GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, wh CVE-2011-32026.1A Cross-Site Scripting (XSS) vulnerability exists in the g parameter to index.php in Jcow CMS 4.2 and earlier.CVE-2011-32039.8A Code Execution vulnerability exists the attachment parameter to index.php in Jcow CMS 4.x to 4.2 and 5.2 to 5.2.