VDB

CVE-2011-2695

CVE-2011-2695 REJECTED

Multiple off-by-one errors in the ext4 subsystem in the Linux kernel before 3.0-rc5 allow local users to cause a denial of service (BUG_ON and system crash) by accessing a sparse file in extent format with a write operation involving a block number corresponding to the largest possible 32-bit unsigned integer.

EPSS 0.07% · 21.0th percentile

Risk Scores

EPSS Score
0.07%
21.0th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSlinux-manta0
Ubuntu:14.04:LTSlinux-goldfish0
Ubuntu:14.04:LTSlinux-maguro0
Ubuntu:14.04:LTSlinux-mako0
Ubuntu:14.04:LTSlinux0
Ubuntu:14.04:LTSlinux-grouper0, 3.1.10-7.27, 3.1.10-6.25
Ubuntu:14.04:LTSlinux-flo0

Timeline

  • Feb 4, 2022 EPSS Score
  • Mar 29, 2022 EPSS Score
  • May 20, 2022 EPSS Score
  • Jul 12, 2022 EPSS Score
  • Sep 4, 2022 EPSS Score
  • Oct 26, 2022 EPSS Score
  • Dec 18, 2022 EPSS Score
  • Feb 9, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 2, 2023 EPSS Score
  • May 25, 2023 EPSS Score
  • Jul 17, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›