Skip to content
OpenAdvisories
Unscored CVE-2011-1180 EUVD-2011-1190GHSA-5qg9-ccww-5w4r

Multiple stack-based buffer overflows in the iriap_getvaluebyclass_indication function in net/irda/iriap.c in the Linux kernel before 2.6.3…

Published Jun 8, 2013 · Updated Sep 16, 2024 · Assigned by redhat

Package: linux-azure Package: linux-azure-fde Package: linux-azure-fde-5.15 Package: linux-gcp Package: linux-gke Package: linux-gkeop Package: linux-hwe Package: linux-intel-iot-realtime Package: linux-raspi-realtime Package: linux-realtime Package: linux-riscv Ecosystem: Ubuntu

Description

Multiple stack-based buffer overflows in the iriap_getvaluebyclass_indication function in net/irda/iriap.c in the Linux kernel before 2.6.39 allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging connectivity to an IrDA infrared network and sending a large integer value for a (1) name length or (2) attribute length.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 6.0 linux-2.6 2.6.32-34squeeze1 DSA-2240-1
Debian 5.0 linux-2.6 2.6.26-26lenny3 DSA-2264-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS linux-realtime +1 No fix yet —
Ubuntu 22.04 LTS linux-riscv +2 No fix yet —
Ubuntu 20.04 LTS linux-gke +3 No fix yet —
Ubuntu 18.04 LTS linux-gcp +2 No fix yet —
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 20.04 LTS linux-azure-fde-5.15 No fix yet —

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed kernel-source 4.8.13-1.1 openSUSE-SU-2024:10128-1

Advisories 3

References