|
CVE ID: | CVE-2011-1748 |
Description: | The raw_release function in net/can/raw.c in the Linux kernel before 2.6.39-rc6 does not properly validate a socket data structure, which allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a crafted release operation. |
Test IDs: | 1.3.6.1.4.1.25623.1.0.69970 1.3.6.1.4.1.25623.1.0.70156 1.3.6.1.4.1.25623.1.0.71918 |
Cross References: |
Common Vulnerability Exposure (CVE) ID: CVE-2011-1748 http://permalink.gmane.org/gmane.linux.network/192974 http://openwall.com/lists/oss-security/2011/04/20/7 http://openwall.com/lists/oss-security/2011/04/21/1 http://openwall.com/lists/oss-security/2011/04/21/2 http://openwall.com/lists/oss-security/2011/04/21/7 http://openwall.com/lists/oss-security/2011/04/22/2 http://openwall.com/lists/oss-security/2011/04/25/4 BugTraq ID: 47835 http://www.securityfocus.com/bid/47835 |
|