CVE-2011-1776: Buffer Overflow
Last updated 24 July 2024
Other sources
The isgptvalid function in fs/partitions/efi.c in the Linux kernel before 2.6.39 does not check the size of an Extensible Firmware Interface (EFI) GUID Partition Table (GPT) entry, which allows physically proximate attackers to cause a denial of service (heap-based buffer overflow and OOPS) or obtain sensitive information from kernel heap memory by connecting a crafted GPT storage device, a different vulnerability than CVE-2011-1577.
— Launchpad
The kernel automatically evaluates partition tables of storage devices. The code for evaluating GUID partitions (in fs/partitions/efi.c) contains a bug that can cause a kernel heap overflow on certain corrupted GUID partition tables.
Upstream commit: http://git.kernel.org/linus/fa039d5f6b126fbd65eefa05db2f67e44df8f121
Acknowledgements:
Red Hat would like to thank Timo Warns for reporting this issue.
— Red Hat
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1776?
CVE-2011-1776 has been classified as a medium severity vulnerability.
How do I fix CVE-2011-1776?
To fix CVE-2011-1776, update to a kernel version greater than 2.6.39 where the vulnerability has been addressed.
What type of attack does CVE-2011-1776 allow?
CVE-2011-1776 allows physically proximate attackers to cause a denial of service.
Which Linux kernel versions are affected by CVE-2011-1776?
CVE-2011-1776 affects Linux kernel versions before 2.6.39.
What component of the Linux kernel is affected by CVE-2011-1776?
CVE-2011-1776 affects the is_gpt_valid function in fs/partitions/efi.c.