1. Home
  2. CVE Database
  3. CVE-2011-1170
LOW · 2.1

CVE-2011-1170

net/ipv4/netfilter/arp_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure mem...

Vulnerability Description

net/ipv4/netfilter/arp_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability to issue a crafted request, and then reading the argument to the resulting modprobe process.

CVSS Score

2.1

LOW

AV:L/AC:L/Au:N/C:P/I:N/A:N
Confidentiality
PARTIAL
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
LinuxLinux Kernel<= 2.6.38.8

Related Weaknesses (CWE)

CWE-200

References

FAQ

What is CVE-2011-1170?

CVE-2011-1170 is a vulnerability with a CVSS score of 2.1 (LOW). net/ipv4/netfilter/arp_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure mem...

How severe is CVE-2011-1170?

CVE-2011-1170 has been rated LOW with a CVSS base score of 2.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2011-1170?

Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.