CVE-2011-2534 describes a buffer overflow vulnerability in the Linux kernel's netfilter ipt_CLUSTERIP module, specifically within the clusterip_proc_write function, affecting versions prior to 2.6.39. This flaw arises from improper handling of string data lacking a null terminator. With a CVSS score of 7.8 (High), this vulnerability allows a local attacker to potentially cause a denial of service or achieve other unspecified impacts with high confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 2.6.39CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.