CVE-2011-1493

CVE-2011-1493 is an array index error in the Linux kernel's ROSE protocol implementation, specifically affecting versions prior to 2.6.39. This vulnerability allows remote attackers to trigger a denial of service through heap memory corruption, or potentially achieve other unspecified impacts, by sending specially crafted FAC_NATIONAL_DIGIS data to a ROSE socket. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector and low attack complexity, enabling unauthenticated attackers to cause significant disruption. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this decade-old vulnerability.