CVE-2011-4604: Buffer Overflow
Don't write more than the requested number of bytes of an batman-adv icmp packet to the userspace buffer. Otherwise unrelated userspace memory might get overwritten by the kernel.
https://lists.open-mesh.org/pipermail/b.a.t.m.a.n/2011-December/005908.html
Statement:
Not vulnerable. This issue did not affect the Linux kernels as shipped with Red Hat Enterprise Linux 4, 5, 6, and Red Hat Enterprise MRG as they did not include support for the BATMAN (Better Approach To Mobile Ad-hoc Networking) out-of-tree kernel module.
Acknowledgements:
Red Hat would like to thank Paul Kot for reporting this issue.
Other sources
The batsocketread function in net/batman-adv/icmpsocket.c in the Linux kernel before 3.3 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted batman-adv ICMP packet.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4604?
The severity of CVE-2011-4604 is rated as high due to the potential for memory corruption in the Linux kernel.
How do I fix CVE-2011-4604?
To fix CVE-2011-4604, update the Linux kernel to a version higher than 3.2.46.
What systems are affected by CVE-2011-4604?
CVE-2011-4604 affects multiple versions of the Linux kernel, specifically versions 3.2 and below.
What type of vulnerability is CVE-2011-4604?
CVE-2011-4604 is a memory corruption vulnerability that could allow malicious userspace memory to be overwritten by the kernel.
Can CVE-2011-4604 lead to system compromise?
Yes, CVE-2011-4604 could potentially lead to a system compromise if exploited, allowing unauthorized access or control.