ID:4427 - Exploit for Double Free in Linux kernel - CVE-2011-1479

 
Main Vulnerability Database Exploits ID:4427 - Exploit for Double Free in Linux kernel - CVE-2011-1479

ID:4427 - Exploit for Double Free in Linux kernel - CVE-2011-1479

Published: August 11, 2020


Vulnerability identifier: #VU43954
Vulnerability risk: Medium
CVE-ID: CVE-2011-1479
CWE-ID: CWE-415
Exploitation vector: Local access
Vulnerable software:
Linux kernel

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to an incorrect fix for CVE-2010-4250. The vulnerability allows a remote attacker local users to cause a denial of service (system crash) via vectors involving failed attempts to create files. NOTE: this vulnerability exists, trigger double free error and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Remediation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.