CVE-2001-1391

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2001-1391
Off-by-one vulnerability in CPIA driver of Linux kernel before 2.2.19 allows users to modify kernel memory.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

2.1 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:L/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
http://marc.info/?l=bugtraq&m=98575345009963&w=2 Mailing List Patch
http://marc.info/?l=bugtraq&m=98637996127004&w=2 Mailing List Patch
http://marc.info/?l=bugtraq&m=98653252326445&w=2 Mailing List
http://marc.info/?l=bugtraq&m=98684172109474&w=2 Mailing List Patch
http://marc.info/?l=bugtraq&m=98759029811377&w=2 Mailing List
http://marc.info/?l=bugtraq&m=98775114228203&w=2 Mailing List Patch
http://marc.info/?l=bugtraq&m=99013830726309&w=2 Mailing List
http://www.linux.org.uk/VERSION/relnotes.2219.html Broken Link
http://www.redhat.com/support/errata/RHSA-2001-047.html Broken Link Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/11162 Third Party Advisory VDB Entry
https://www.debian.org/security/2001/dsa-047 Broken Link
Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

02 Feb 2024, 02:56

Type Values Removed Values Added
CVSS v2 : 2.1
v3 : unknown 		v2 : 2.1
v3 : 5.5
CWE NVD-CWE-Other CWE-193
References () http://marc.info/?l=bugtraq&m=98575345009963&w=2 - () http://marc.info/?l=bugtraq&m=98575345009963&w=2 - Mailing List, Patch
References () http://marc.info/?l=bugtraq&m=98637996127004&w=2 - () http://marc.info/?l=bugtraq&m=98637996127004&w=2 - Mailing List, Patch
References () http://marc.info/?l=bugtraq&m=98653252326445&w=2 - () http://marc.info/?l=bugtraq&m=98653252326445&w=2 - Mailing List
References () http://marc.info/?l=bugtraq&m=98684172109474&w=2 - () http://marc.info/?l=bugtraq&m=98684172109474&w=2 - Mailing List, Patch
References () http://marc.info/?l=bugtraq&m=98759029811377&w=2 - () http://marc.info/?l=bugtraq&m=98759029811377&w=2 - Mailing List
References () http://marc.info/?l=bugtraq&m=98775114228203&w=2 - () http://marc.info/?l=bugtraq&m=98775114228203&w=2 - Mailing List, Patch
References () http://marc.info/?l=bugtraq&m=99013830726309&w=2 - () http://marc.info/?l=bugtraq&m=99013830726309&w=2 - Mailing List
References () http://www.linux.org.uk/VERSION/relnotes.2219.html - () http://www.linux.org.uk/VERSION/relnotes.2219.html - Broken Link
References () http://www.redhat.com/support/errata/RHSA-2001-047.html - Vendor Advisory () http://www.redhat.com/support/errata/RHSA-2001-047.html - Broken Link, Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/11162 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/11162 - Third Party Advisory, VDB Entry
References () https://www.debian.org/security/2001/dsa-047 - () https://www.debian.org/security/2001/dsa-047 - Broken Link
Information

Published : 2001-04-17 04:00

Updated : 2024-02-02 02:56

NVD link : CVE-2001-1391

Mitre link : CVE-2001-1391

CVE.ORG link : CVE-2001-1391

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-193

Off-by-one Error