CVE-2011-2491
published 2013-03-01CVE-2011-2491: The Network Lock Manager (NLM) protocol implementation in the NFS client functionality in the Linux kernel before 3.0 allows local users to cause a denial of…
PriorityP414medium4.9CVSS 2.0
AVLACLAuNCNINAC
EPSS
0.40%
32.7th percentile
The Network Lock Manager (NLM) protocol implementation in the NFS client functionality in the Linux kernel before 3.0 allows local users to cause a denial of service (system hang) via a LOCK_UN flock system call.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| linux | linux_kernel | < 3.0 | 3.0 |
| linux | linux_kernel | >= 0 < 3.11.0-12.19 | 3.11.0-12.19 |
| redhat | enterprise_linux_desktop | — | — |
| redhat | enterprise_linux_server | — | — |
| redhat | enterprise_linux_workstation | — | — |
CVSS provenance
nvdv2.04.9MEDIUMAV:L/AC:L/Au:N/C:N/I:N/A:C
osv4.9MEDIUM
vendor_ubuntu5.0MEDIUM
vendor_redhat4.9MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2011-12-03·CVSS 4.9
CVE-2011-2491 [MEDIUM] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the kernel.
Vasily Averin discovered that the NFS Lock Manager (NLM) incorrectly
handled unlock requests. A local attacker could exploit this to cause a
denial of service. (CVE-2011-2491)
Robert Swiecki discovered that mapping extensions were incorrectly handled.
A local attacker could exploit this to crash the system, leading to a
denial of service. (CVE-2011-2496)
It was discovered that the wireless stack incorrectly verified SSID
lengths. A local attacker could exploit this to cause a denial of service
or gain root privileges. (CVE-2011-2517)
Ben Pfaff discovered that Classless Queuing Disciplines (qdiscs) were being
incorrectly handled. A local attacker could exploit this to crash the
system, leadin
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2011-11-29·CVSS 4.0
CVE-2011-2183 [MEDIUM] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the kernel.
Andrea Righi discovered a race condition in the KSM memory merging support.
If KSM was being used, a local attacker could exploit this to crash the
system, leading to a denial of service. (CVE-2011-2183)
Vasily Averin discovered that the NFS Lock Manager (NLM) incorrectly
handled unlock requests. A local attacker could exploit this to cause a
denial of service. (CVE-2011-2491)
Vasiliy Kulikov discovered that taskstats did not enforce access
restrictions. A local attacker could exploit this to read certain
information, leading to a loss of privacy. (CVE-2011-2494)
Vasiliy Kulikov discovered that /proc/PID/io did not enforce access
restrictions. A local attacker could exploit this to read cert
Ubuntu
Linux (Maverick backport) vulnerabilities
vendor_ubuntu·2011-11-24·CVSS 3.3
CVE-2011-1585 [LOW] Linux (Maverick backport) vulnerabilities
Title: Linux (Maverick backport) vulnerabilities
Summary: Several security issues were fixed in the kernel.
It was discovered that CIFS incorrectly handled authentication. When a user
had a CIFS share mounted that required authentication, a local user could
mount the same share without knowing the correct password. (CVE-2011-1585)
Andrea Righi discovered a race condition in the KSM memory merging support.
If KSM was being used, a local attacker could exploit this to crash the
system, leading to a denial of service. (CVE-2011-2183)
Vasily Averin discovered that the NFS Lock Manager (NLM) incorrectly
handled unlock requests. A local attacker could exploit this to cause a
denial of service. (CVE-2011-2491)
Robert Swiecki discovered that mapping extensions were incorrectly handled.
A loca
Ubuntu
Linux (Natty backport) vulnerabilities
vendor_ubuntu·2011-11-24·CVSS 4.0
CVE-2011-2183 [MEDIUM] Linux (Natty backport) vulnerabilities
Title: Linux (Natty backport) vulnerabilities
Summary: Several security issues were fixed in the kernel.
Andrea Righi discovered a race condition in the KSM memory merging support.
If KSM was being used, a local attacker could exploit this to crash the
system, leading to a denial of service. (CVE-2011-2183)
Vasily Averin discovered that the NFS Lock Manager (NLM) incorrectly
handled unlock requests. A local attacker could exploit this to cause a
denial of service. (CVE-2011-2491)
Vasiliy Kulikov discovered that taskstats did not enforce access
restrictions. A local attacker could exploit this to read certain
information, leading to a loss of privacy. (CVE-2011-2494)
Vasiliy Kulikov discovered that /proc/PID/io did not enforce access
restrictions. A local attacker could exploit this to
Ubuntu
Linux (OMAP4) vulnerabilities
vendor_ubuntu·2011-11-24·CVSS 4.0
CVE-2011-2479 [MEDIUM] Linux (OMAP4) vulnerabilities
Title: Linux (OMAP4) vulnerabilities
Summary: Several security issues were fixed in the kernel.
Andrea Righi discovered a race condition in the KSM memory merging support.
If KSM was being used, a local attacker could exploit this to crash the
system, leading to a denial of service. (CVE-2011-2183)
It was discovered that an mmap() call with the MAP_PRIVATE flag on
"/dev/zero" was incorrectly handled. A local attacker could exploit this to
crash the system, leading to a denial of service. (CVE-2011-2479)
Vasily Averin discovered that the NFS Lock Manager (NLM) incorrectly
handled unlock requests. A local attacker could exploit this to cause a
denial of service. (CVE-2011-2491)
Vasiliy Kulikov discovered that taskstats did not enforce access
restrictions. A local attacker could exploit
Ubuntu
Linux kernel (Marvell DOVE) vulnerabilities
vendor_ubuntu·2011-11-21·CVSS 4.9
CVE-2011-2491 [MEDIUM] Linux kernel (Marvell DOVE) vulnerabilities
Title: Linux kernel (Marvell DOVE) vulnerabilities
Summary: Several security issues were fixed in the kernel.
Vasily Averin discovered that the NFS Lock Manager (NLM) incorrectly
handled unlock requests. A local attacker could exploit this to cause a
denial of service. (CVE-2011-2491)
Robert Swiecki discovered that mapping extensions were incorrectly handled.
A local attacker could exploit this to crash the system, leading to a
denial of service. (CVE-2011-2496)
It was discovered that the wireless stack incorrectly verified SSID
lengths. A local attacker could exploit this to cause a denial of service
or gain root privileges. (CVE-2011-2517)
Ben Pfaff discovered that Classless Queuing Disciplines (qdiscs) were being
incorrectly handled. A local attacker could exploit this to crash the
Ubuntu
Linux kernel (EC2) vulnerabilities
vendor_ubuntu·2011-11-21·CVSS 4.9
CVE-2011-2525 [MEDIUM] Linux kernel (EC2) vulnerabilities
Title: Linux kernel (EC2) vulnerabilities
Summary: Several security issues were fixed in the kernel.
Vasily Averin discovered that the NFS Lock Manager (NLM) incorrectly
handled unlock requests. A local attacker could exploit this to cause a
denial of service. (CVE-2011-2491)
Robert Swiecki discovered that mapping extensions were incorrectly handled.
A local attacker could exploit this to crash the system, leading to a
denial of service. (CVE-2011-2496)
It was discovered that the wireless stack incorrectly verified SSID
lengths. A local attacker could exploit this to cause a denial of service
or gain root privileges. (CVE-2011-2517)
Ben Pfaff discovered that Classless Queuing Disciplines (qdiscs) were being
incorrectly handled. A local attacker could exploit this to crash the
system,
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2011-11-21·CVSS 3.3
CVE-2011-1585 [LOW] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the kernel.
It was discovered that CIFS incorrectly handled authentication. When a user
had a CIFS share mounted that required authentication, a local user could
mount the same share without knowing the correct password. (CVE-2011-1585)
Andrea Righi discovered a race condition in the KSM memory merging support.
If KSM was being used, a local attacker could exploit this to crash the
system, leading to a denial of service. (CVE-2011-2183)
Vasily Averin discovered that the NFS Lock Manager (NLM) incorrectly
handled unlock requests. A local attacker could exploit this to cause a
denial of service. (CVE-2011-2491)
Robert Swiecki discovered that mapping extensions were incorrectly handled.
A local attacker co
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2011-11-21·CVSS 3.3
CVE-2011-1585 [LOW] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the kernel.
It was discovered that CIFS incorrectly handled authentication. When a user
had a CIFS share mounted that required authentication, a local user could
mount the same share without knowing the correct password. (CVE-2011-1585)
It was discovered that the GRE protocol incorrectly handled netns
initialization. A remote attacker could send a packet while the ip_gre
module was loading, and crash the system, leading to a denial of service.
(CVE-2011-1767)
It was discovered that the IP/IP protocol incorrectly handled netns
initialization. A remote attacker could send a packet while the ipip module
was loading, and crash the system, leading to a denial of service.
(CVE-2011-1768)
Vasily Averin discove
Ubuntu
Linux kernel (FSL-IMX51) vulnerabilities
vendor_ubuntu·2011-11-21·CVSS 3.3
CVE-2011-1585 [LOW] Linux kernel (FSL-IMX51) vulnerabilities
Title: Linux kernel (FSL-IMX51) vulnerabilities
Summary: Several security issues were fixed in the kernel.
It was discovered that CIFS incorrectly handled authentication. When a user
had a CIFS share mounted that required authentication, a local user could
mount the same share without knowing the correct password. (CVE-2011-1585)
It was discovered that the GRE protocol incorrectly handled netns
initialization. A remote attacker could send a packet while the ip_gre
module was loading, and crash the system, leading to a denial of service.
(CVE-2011-1767)
It was discovered that the IP/IP protocol incorrectly handled netns
initialization. A remote attacker could send a packet while the ipip module
was loading, and crash the system, leading to a denial of service.
(CVE-2011-1768)
Vasily Av
Ubuntu
Linux kernel (OMAP4) vulnerabilities
vendor_ubuntu·2011-10-25·CVSS 5.0
CVE-2010-3873 [MEDIUM] Linux kernel (OMAP4) vulnerabilities
Title: Linux kernel (OMAP4) vulnerabilities
Summary: Several security issues were fixed in the kernel.
Dan Rosenberg discovered that the Linux kernel X.25 implementation
incorrectly parsed facilities. A remote attacker could exploit this to
crash the kernel, leading to a denial of service. (CVE-2010-3873)
Andrea Righi discovered a race condition in the KSM memory merging support.
If KSM was being used, a local attacker could exploit this to crash the
system, leading to a denial of service. (CVE-2011-2183)
Vasily Averin discovered that the NFS Lock Manager (NLM) incorrectly
handled unlock requests. A local attacker could exploit this to cause a
denial of service. (CVE-2011-2491)
Vasiliy Kulikov discovered that taskstats did not enforce access
restrictions. A local attacker could exploi
Red Hat
kernel: rpc task leak after flock()ing NFS share
vendor_redhat·2011-05-31·CVSS 4.9
CVE-2011-2491 [MEDIUM] kernel: rpc task leak after flock()ing NFS share
kernel: rpc task leak after flock()ing NFS share
The Network Lock Manager (NLM) protocol implementation in the NFS client functionality in the Linux kernel before 3.0 allows local users to cause a denial of service (system hang) via a LOCK_UN flock system call.
Package: kernel-rt (Red Hat Enterprise MRG 1) - Affected
GHSA
GHSA-23hf-jhww-867g: The Network Lock Manager (NLM) protocol implementation in the NFS client functionality in the Linux kernel before 3
ghsa_unreviewed·2022-05-13
CVE-2011-2491 [MEDIUM] CWE-400 GHSA-23hf-jhww-867g: The Network Lock Manager (NLM) protocol implementation in the NFS client functionality in the Linux kernel before 3
The Network Lock Manager (NLM) protocol implementation in the NFS client functionality in the Linux kernel before 3.0 allows local users to cause a denial of service (system hang) via a LOCK_UN flock system call.
OSV
CVE-2011-2491: The Network Lock Manager (NLM) protocol implementation in the NFS client functionality in the Linux kernel before 3
osv·2011-10-06·CVSS 4.9
CVE-2011-2491 [MEDIUM] CVE-2011-2491: The Network Lock Manager (NLM) protocol implementation in the NFS client functionality in the Linux kernel before 3
The Network Lock Manager (NLM) protocol implementation in the NFS client functionality in the Linux kernel before 3.0 allows local users to cause a denial of service (system hang) via a LOCK_UN flock system call.
No detection rules found.
No public exploits indexed.
http://ftp.osuosl.org/pub/linux/kernel/v3.0/ChangeLog-3.0http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0b760113a3a155269a3fba93a409c640031dd68fhttp://rhn.redhat.com/errata/RHSA-2011-1212.htmlhttp://www.openwall.com/lists/oss-security/2011/06/23/6https://bugzilla.redhat.com/show_bug.cgi?id=709393https://github.com/torvalds/linux/commit/0b760113a3a155269a3fba93a409c640031dd68fhttp://ftp.osuosl.org/pub/linux/kernel/v3.0/ChangeLog-3.0http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0b760113a3a155269a3fba93a409c640031dd68fhttp://rhn.redhat.com/errata/RHSA-2011-1212.htmlhttp://www.openwall.com/lists/oss-security/2011/06/23/6https://bugzilla.redhat.com/show_bug.cgi?id=709393https://github.com/torvalds/linux/commit/0b760113a3a155269a3fba93a409c640031dd68f
2013-03-01
Published