Denial of Service and Buffer Overflow in Linux Kernel ROSE Socket

CVE-2011-4913

Summary

The rose_parse_ccitt function in the Linux kernel fails to properly validate certain fields in data sent to a ROSE socket. This oversight creates critical security vulnerabilities where remote attackers can exploit the system. By sending manipulated data, attackers can trigger a denial of service through integer underflow and heap memory corruption. Additionally, by using excessively large length values, attackers may also execute stack-based buffer overflow attacks, risking overall system integrity and stability.

References