Vulnerability Details : CVE-2011-4132
The cleanup_journal_tail function in the Journaling Block Device (JBD) functionality in the Linux kernel 2.6 allows local users to cause a denial of service (assertion error and kernel oops) via an ext3 or ext4 image with an "invalid log first block value."
Vulnerability category: Input validationDenial of service
Threat overview for CVE-2011-4132
Top countries where our scanners detected CVE-2011-4132
Top open port discovered on systems with this issue
80
IPs affected by CVE-2011-4132 20,789
Threat actors abusing to this issue?
Yes
Find out if you* are
affected by CVE-2011-4132!
*Directly or indirectly through your vendors, service providers and 3rd parties.
Powered by
attack surface intelligence
from SecurityScorecard.
Exploit prediction scoring system (EPSS) score for CVE-2011-4132
Probability of exploitation activity in the next 30 days: 0.04%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 6 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2011-4132
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
2.1
|
LOW | AV:L/AC:L/Au:N/C:N/I:N/A:P |
3.9
|
2.9
|
NIST |
CWE ids for CVE-2011-4132
-
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.Assigned by: nvd@nist.gov (Primary)
References for CVE-2011-4132
-
http://xorl.wordpress.com/2011/12/08/cve-2011-4132-linux-kernel-jbdjbd2-local-dos/
CVE-2011-4132: Linux kernel jbd/jbd2 Local DoS | xorl %eax, %eaxExploit
-
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=8762202dd0d6e46854f786bdb6fb3780a1625efe
-
http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html
[security-announce] SUSE-SU-2012:0554-1: important: Security update for
-
http://www.openwall.com/lists/oss-security/2011/11/13/4
oss-security - Re: CVE Request -- kernel: jbd/jbd2: invalid value of first log block leads to oops
-
http://securitytracker.com/id?1026325
Linux Kernel Journaling Block Device Input Validation Flaw Lets Local Users Deny Service - SecurityTracker
-
http://www.openwall.com/lists/oss-security/2011/11/11/6
oss-security - CVE Request -- kernel: jbd/jbd2: invalid value of first log block leads to oops
-
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
[security-announce] SUSE-SU-2015:0812-1: important: Security update for
-
http://www.securityfocus.com/bid/50663
Linux Kernel 'journal_get_superblock()' Function Local Denial of Service Vulnerability
-
https://bugzilla.redhat.com/show_bug.cgi?id=753341
753341 – (CVE-2011-4132) CVE-2011-4132 kernel: jbd/jbd2: invalid value of first log block leads to oops
Products affected by CVE-2011-4132
- cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*
- cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:*:*:*:*