CVE Vulnerabilities

CVE-2011-1182

Published: Mar 01, 2013 | Modified: Apr 11, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
3.6 LOW
AV:L/AC:L/Au:N/C:N/I:P/A:P
RedHat/V2
3.6 LOW
AV:L/AC:L/Au:N/C:N/I:P/A:P
RedHat/V3
Ubuntu
LOW
root.io logo minimus.io logo echo.ai logo

kernel/signal.c in the Linux kernel before 2.6.39 allows local users to spoof the uid and pid of a signal sender via a sigqueueinfo system call.

Affected Software

NameVendorStart VersionEnd Version
Linux_kernelLinux*2.6.39 (excluding)
Red Hat Enterprise Linux 5RedHatkernel-0:2.6.18-238.19.1.el5*
Red Hat Enterprise Linux 6RedHatkernel-0:2.6.32-131.12.1.el6*
Red Hat Enterprise Linux 6.0 EUS - Server OnlyRedHatkernel-0:2.6.32-71.31.1.el6*
LinuxUbuntukarmic*
LinuxUbuntulucid*
LinuxUbuntumaverick*
LinuxUbuntunatty*
LinuxUbuntuupstream*
Linux-ec2Ubuntukarmic*
Linux-ec2Ubuntulucid*
Linux-ec2Ubuntumaverick*
Linux-ec2Ubuntuupstream*
Linux-fsl-imx51Ubuntukarmic*
Linux-fsl-imx51Ubuntulucid*
Linux-fsl-imx51Ubuntuupstream*
Linux-lts-backport-maverickUbuntulucid*
Linux-lts-backport-maverickUbuntuupstream*
Linux-lts-backport-nattyUbuntuupstream*
Linux-mvl-doveUbuntukarmic*
Linux-mvl-doveUbuntulucid*
Linux-mvl-doveUbuntumaverick*
Linux-mvl-doveUbuntuupstream*
Linux-source-2.6.15Ubuntudapper*
Linux-source-2.6.15Ubuntuupstream*
Linux-ti-omap4Ubuntumaverick*
Linux-ti-omap4Ubuntunatty*
Linux-ti-omap4Ubuntuupstream*

References