CVE-2011-3363

Published: 03 October 2011

The setup_cifs_sb function in fs/cifs/connect.c in the Linux kernel before 2.6.39 does not properly handle DFS referrals, which allows remote CIFS servers to cause a denial of service (system crash) by placing a referral at the root of a share.

From the Ubuntu security team

Yogesh Sharma discovered that CIFS did not correctly handle UNCs that had no prefixpaths. A local attacker with access to a CIFS partition could exploit this to crash the system, leading to a denial of service.

Priority

Medium

CVSS 3 base score: 6.5

Status

Notes

from oss-security: "If you have this, you might also want
cifs: add fallback in is_path_accessible for old servers
221d1d797202984cb874e3ed9f1388593d34ee22"

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3363
• https://usn.ubuntu.com/usn/usn-1167-1
• https://usn.ubuntu.com/usn/usn-1168-1
• https://usn.ubuntu.com/usn/usn-1162-1
• https://usn.ubuntu.com/usn/usn-1159-1
• https://usn.ubuntu.com/usn/usn-1161-1
• https://usn.ubuntu.com/usn/usn-1242-1
• https://usn.ubuntu.com/usn/usn-1241-1
• https://usn.ubuntu.com/usn/usn-1243-1
• https://usn.ubuntu.com/usn/usn-1244-1
• https://usn.ubuntu.com/usn/usn-1256-1
• https://usn.ubuntu.com/usn/usn-1281-1
• NVD
• Launchpad
• Debian

Bugs

• https://bugzilla.redhat.com/show_bug.cgi?id=682829
• https://bugzilla.redhat.com/show_bug.cgi?id=738291
• https://launchpad.net/bugs/866034