CVE-2011-4913

CVE-2011-4913 describes a critical vulnerability in the Linux kernel's ROSE protocol implementation, specifically affecting the rose_parse_ccitt function. This flaw allows remote attackers to trigger a denial of service through integer underflow, heap memory corruption, and system panic, or conduct stack-based buffer overflow attacks by manipulating length values in data sent to a ROSE socket. With a CVSS score of 7.8, this vulnerability is considered high severity due to its network attack vector, low attack complexity, and potential for complete system availability loss. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.