CVE-2011-0524

CVSS V2 Low 2.1 CVSS V3 None
Description
Multiple buffer overflows in the NMEA parser (nmea-gen.c) in gypsy 0.8 allow local users to cause a denial of service (crash) via unspecified vectors related to the sprintf function.
Overview
  • CVE ID
  • CVE-2011-0524
  • Assigner
  • secalert@redhat.com
  • Vulnerability Status
  • Modified
  • Published Version
  • 2012-08-13T20:55:01
  • Last Modified Date
  • 2013-12-13T04:46:45
Weakness Enumerations
CWE URL
CWE-119 http://cwe.mitre.org/data/definitions/119.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:iain:gypsy:0.8:*:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:L/AC:L/Au:N/C:N/I:N/A:P
  • Access Vector
  • LOCAL
  • Access Compatibility
  • LOW
  • Authentication
  • NONE
  • Confidentiality Impact
  • NONE
  • Integrity Impact
  • NONE
  • Availability Impact
  • PARTIAL
  • Base Score
  • 2.1
  • Severity
  • LOW
  • Exploitability Score
  • 3.9
  • Impact Score
  • 2.9
References
Reference URL Reference Tags
http://www.openwall.com/lists/oss-security/2011/01/25/10
https://bugs.freedesktop.org/show_bug.cgi?id=33431
http://lists.opensuse.org/opensuse-updates/2012-07/msg00034.html
http://www.openwall.com/lists/oss-security/2011/01/24/10
http://secunia.com/advisories/49991 Vendor Advisory
https://bugs.launchpad.net/ubuntu/+source/gypsy/+bug/690323
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106927.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106919.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/107020.html
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2011-0524
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0524
History
Created Old Value New Value Data Type Notes
2022-05-10 10:39:33 Added to TrackCVE