Heap-based buffer overflow in the is_gpt_valid function in fs/partitions/efi.c in the Linux kernel 2.6.38 and earlier allows physically proximate attackers to cause a denial of service (OOPS) or possibly have unspecified other impact via a crafted size of the EFI GUID partition-table header on removable media.
Advisories
Source ID Title
Debian DSA Debian DSA DSA-2264-1 linux-2.6 security update
EUVD EUVD EUVD-2011-1578 Heap-based buffer overflow in the is_gpt_valid function in fs/partitions/efi.c in the Linux kernel 2.6.38 and earlier allows physically proximate attackers to cause a denial of service (OOPS) or possibly have unspecified other impact via a crafted size of the EFI GUID partition-table header on removable media.
Ubuntu USN Ubuntu USN USN-1170-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1183-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1187-1 Linux kernel (Maverick backport) vulnerabilities
Ubuntu USN Ubuntu USN USN-1193-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1202-1 Linux kernel (OMAP4) vulnerabilities
Ubuntu USN Ubuntu USN USN-1203-1 Linux kernel (Marvel DOVE) vulnerabilities
Ubuntu USN Ubuntu USN USN-1204-1 Linux kernel (i.MX51) vulnerabilities
Ubuntu USN Ubuntu USN USN-1208-1 Linux kernel (Marvel DOVE) vulnerabilities
Ubuntu USN Ubuntu USN USN-1212-1 Linux kernel (OMAP4) vulnerabilities
Ubuntu USN Ubuntu USN USN-1216-1 Linux kernel (EC2) vulnerabilities
Ubuntu USN Ubuntu USN USN-1218-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1256-1 Linux kernel (Natty backport) vulnerabilities
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2024-08-06T22:28:41.821Z

Reserved: 2011-04-05T00:00:00

Link: CVE-2011-1577

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2011-05-03T19:55:12.807

Modified: 2025-04-11T00:51:21.963

Link: CVE-2011-1577

cve-icon Redhat

Severity : Low

Publid Date: 2011-04-13T00:00:00Z

Links: CVE-2011-1577 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses