Severity : High Published : 2012-06-21 Modified : 2012-06-22 Base Score : 7.8 Details : The rose_parse_ccitt function in net/rose/rose_subr.c in the Linux kernel before 2.6.39 does not validate the FAC_CCITT_DEST_NSAP and FAC_CCITT_SRC_NSAP fields, which allows remote attackers to (1) cause a denial of service (integer underflow, heap memory corruption, and panic) via a small length value in data sent to a ROSE socket, or (2) conduct stack-based buffer overflow attacks via a large length value in data sent to a ROSE socket. Product/Version : Pro 4.x   CGE 4.x   Mobilinux 4.x   Professional PRO 5.0   Professional PRO 5.0   CGE 5.x   Mobilinux 5.x

CVE-2011-4914 CVE-2011-4913 CVE-2011-4885 CVE-2011-4619 CVE-2011-4578 CVE-2011-4577 CVE-2011-4576 CVE-2011-4566 CVE-2011-4330 CVE-2011-4324 CVE-2011-4317 CVE-2011-4313 CVE-2011-4132 CVE-2011-4130 CVE-2011-4127 CVE-2011-4110 CVE-2011-4109 CVE-2011-4108 CVE-2011-4081 CVE-2011-4077 CVE-2011-4029 CVE-2011-4028 CVE-2011-3639 CVE-2011-3607 CVE-2011-3389 CVE-2011-3378 CVE-2011-3368 CVE-2011-3363 CVE-2011-3359 CVE-2011-3353 CVE-2011-3348 CVE-2011-3210 CVE-2011-3209 CVE-2011-3192 CVE-2011-3191 CVE-2011-3188 CVE-2011-3149 CVE-2011-3148 CVE-2011-3026 CVE-2011-2898 CVE-2011-2896 CVE-2011-2895 CVE-2011-2834 CVE-2011-2724 CVE-2011-2699 CVE-2011-2695 CVE-2011-2694 CVE-2011-2692 CVE-2011-2691 CVE-2011-2690 CVE-2011-2534 CVE-2011-2525 CVE-2011-2522 CVE-2011-2501 CVE-2011-2496 CVE-2011-2494 CVE-2011-2492 CVE-2011-2484 CVE-2011-2213 CVE-2011-2212 CVE-2011-2202 CVE-2011-2192 CVE-2011-2182 CVE-2011-2022 CVE-2011-1945 CVE-2011-1944 CVE-2011-1938 CVE-2011-1928 CVE-2011-1833 CVE-2011-1776 CVE-2011-1767 CVE-2011-1760 CVE-2011-1759 CVE-2011-1751 CVE-2011-1750 CVE-2011-1747 CVE-2011-1746 CVE-2011-1745 CVE-2011-1677 CVE-2011-1676 CVE-2011-1675 CVE-2011-1659 CVE-2011-1658 CVE-2011-1593 CVE-2011-1592 CVE-2011-1591 CVE-2011-1590 CVE-2011-1577 CVE-2011-1573 CVE-2011-1495 CVE-2011-1494 CVE-2011-1493 CVE-2011-1477 CVE-2011-1173 CVE-2011-1172 CVE-2011-1171 CVE-2011-1170 CVE-2011-1163 CVE-2011-1155 CVE-2011-1098 CVE-2011-1095 CVE-2011-1093 CVE-2011-1090 CVE-2011-1082 CVE-2011-1071 CVE-2011-1044 CVE-2011-1017 CVE-2011-1013 CVE-2011-1012 CVE-2011-1010 CVE-2011-0997 CVE-2011-0719 CVE-2011-0711 CVE-2011-0695 CVE-2011-0539 CVE-2011-0536 CVE-2011-0521 CVE-2011-0465 CVE-2011-0463 CVE-2011-0419 CVE-2011-0014