CVE-2011-0712: Buffer Overflow
Description of problem: Use strlcpy() to assure not to overflow the string array sizes by too long USB device name string (unlikely). This only affects Native Instruments USB audio devices.
Proposed patch: http://git.kernel.org/?p=linux/kernel/git/tiwai/sound-2.6.git;a=commitdiff;h=eaae55dac6b64c0616046436b294e69fc5311581
Acknowledgements:
Red Hat would like to thank Rafael Dominguez Vega for reporting this issue.
Other sources
Multiple buffer overflows in the caiaq Native Instruments USB audio functionality in the Linux kernel before 2.6.38-rc4-next-20110215 might allow attackers to cause a denial of service or possibly have unspecified other impact via a long USB device name, related to (1) the sndusbcaiaqaudioinit function in sound/usb/caiaq/audio.c and (2) the sndusbcaiaqmidiinit function in sound/usb/caiaq/midi.c.
— Launchpad
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-0712?
CVE-2011-0712 is classified as a low severity vulnerability involving the potential overflow of string array sizes.
How does CVE-2011-0712 affect users?
CVE-2011-0712 specifically affects Native Instruments USB audio devices and is unlikely to cause significant issues.
How do I fix CVE-2011-0712?
To address CVE-2011-0712, users should apply the proposed patch that uses strlcpy() to handle USB device name strings safely.
Which software versions are affected by CVE-2011-0712?
CVE-2011-0712 affects Linux kernel versions up to 2.6.38, including release candidates and specific distributions.
Is CVE-2011-0712 exploitable?
Exploitation of CVE-2011-0712 is unlikely due to its specific impact on USB device name handling.