Heap Memory Corruption and Privilege Escalation Vulnerability in Linux Kernel's OPL3 Sound Driver

CVE-2011-1477 · HIGH Severity

AV:L/AC:L/AU:N/C:C/I:C/A:C

Multiple array index errors in sound/oss/opl3.c in the Linux kernel before 2.6.39 allow local users to cause a denial of service (heap memory corruption) or possibly gain privileges by leveraging write access to /dev/sequencer.

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.