CVE-2011-1476

Integer underflow in the Open Sound System (OSS) subsystem in the Linux kernel before 2.6.39 on unspecified non-x86 platforms allows local users to cause a denial of service (memory corruption) by leveraging write access to /dev/sequencer.

Affected Software

Name	Vendor	Start Version	End Version
Linux_kernel	Linux	2.6.38	2.6.38
Linux_kernel	Linux	2.6.38	2.6.38
Linux_kernel	Linux	2.6.38	2.6.38
Linux_kernel	Linux	2.6.38.3	2.6.38.3
Linux_kernel	Linux	*	2.6.38.8
Linux_kernel	Linux	2.6.38	2.6.38
Linux_kernel	Linux	2.6.38	2.6.38
Linux_kernel	Linux	2.6.38	2.6.38
Linux_kernel	Linux	2.6.38.6	2.6.38.6
Linux_kernel	Linux	2.6.38.1	2.6.38.1
Linux_kernel	Linux	2.6.38	2.6.38
Linux_kernel	Linux	2.6.38.5	2.6.38.5
Linux_kernel	Linux	2.6.38.2	2.6.38.2
Linux_kernel	Linux	2.6.38	2.6.38
Linux_kernel	Linux	2.6.38	2.6.38
Linux_kernel	Linux	2.6.38.4	2.6.38.4
Linux_kernel	Linux	2.6.38.7	2.6.38.7
Linux	Ubuntu	hardy	*
Linux	Ubuntu	lucid	*
Linux	Ubuntu	maverick	*
Linux	Ubuntu	natty	*
Linux	Ubuntu	upstream	*
Linux-armadaxp	Ubuntu	upstream	*
Linux-ec2	Ubuntu	lucid	*
Linux-ec2	Ubuntu	maverick	*
Linux-ec2	Ubuntu	upstream	*
Linux-fsl-imx51	Ubuntu	lucid	*
Linux-fsl-imx51	Ubuntu	upstream	*
Linux-lts-backport-maverick	Ubuntu	lucid	*
Linux-lts-backport-maverick	Ubuntu	upstream	*
Linux-lts-backport-natty	Ubuntu	upstream	*
Linux-lts-backport-oneiric	Ubuntu	upstream	*
Linux-mvl-dove	Ubuntu	lucid	*
Linux-mvl-dove	Ubuntu	maverick	*
Linux-mvl-dove	Ubuntu	upstream	*
Linux-ti-omap4	Ubuntu	maverick	*
Linux-ti-omap4	Ubuntu	natty	*
Linux-ti-omap4	Ubuntu	upstream	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2011-1476
CWE	https://cwe.mitre.org/data/definitions/189.html

Affected Software

References