CVE-2011-4077: Buffer Overflow
A flaw was found in the way Linux kernel's XFS filesystem implementation handled links with pathname larger than MAXPATHLEN. When CONFIGXFSDEBUG configuration option was not enabled when compiling Linux kernel, an attacker able to mount malicious XFS image could use this flaw to crash the system, or potentially, elevate his privileges on that system.
Proposed upstream patch: http://oss.sgi.com/archives/xfs/2011-10/msg00345.html
Other sources
Buffer overflow in the xfsreadlink function in fs/xfs/xfsvnodeops.c in XFS in the Linux kernel 2.6, when CONFIGXFSDEBUG is disabled, allows local users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via an XFS image containing a symbolic link with a long pathname.
— Launchpad
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4077?
CVE-2011-4077 has a high severity rating due to its potential to crash the system when affected configurations are exploited.
How do I fix CVE-2011-4077?
To fix CVE-2011-4077, ensure that you recompile the Linux kernel with the CONFIG_XFS_DEBUG option enabled.
Which systems are affected by CVE-2011-4077?
CVE-2011-4077 affects various versions of the Linux kernel, particularly those before 3.1.5 and after 2.6.12.
Can CVE-2011-4077 be exploited remotely?
Yes, an attacker with access to mount a malicious XFS image can exploit CVE-2011-4077, potentially leading to system crashes.
What components of the Linux kernel are involved in CVE-2011-4077?
CVE-2011-4077 involves the XFS filesystem implementation in the Linux kernel specifically related to pathname handling.