CVE-2011-0712

Multiple buffer overflows in the caiaq Native Instruments USB audio functionality in the Linux kernel before 2.6.38-rc4-next-20110215 might allow attackers to cause a denial of service or possibly have unspecified other impact via a long USB device name, related to (1) the snd_usb_caiaq_audio_init function in sound/usb/caiaq/audio.c and (2) the snd_usb_caiaq_midi_init function in sound/usb/caiaq/midi.c.

• CWE-120

• http://git.kernel.org/?p=linux/kernel/git/tiwai/sound-2.6.git%3Ba=commit%3Bh=eaae55dac6b64c0616046436b294e69fc5311581
• http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.38-rc4-next-20110215.bz2Broken Link
• http://www.openwall.com/lists/oss-security/2011/02/16/11Mailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2011/02/16/12Mailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2011/02/16/5Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/46419Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-1146-1Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=677881Issue Tracking, Patch, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65461Third Party Advisory, VDB Entry
• http://git.kernel.org/?p=linux/kernel/git/tiwai/sound-2.6.git%3Ba=commit%3Bh=eaae55dac6b64c0616046436b294e69fc5311581
• http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.38-rc4-next-20110215.bz2Broken Link
• http://www.openwall.com/lists/oss-security/2011/02/16/11Mailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2011/02/16/12Mailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2011/02/16/5Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/46419Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-1146-1Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=677881Issue Tracking, Patch, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65461Third Party Advisory, VDB Entry

Published

Feb 18, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-0706The JNLPClassLoader class in IcedTea-Web before 1.0.1, as us…
• CVE-2011-0707Multiple cross-site scripting (XSS) vulnerabilities in Cgi/c…
• CVE-2011-0708exif.c in the Exif extension in PHP before 5.3.6 on 64-bit p…
• CVE-2011-0709The br_mdb_ip_get function in net/bridge/br_multicast.c in t…7.5
• CVE-2011-0710The task_show_regs function in arch/s390/kernel/traps.c in t…
• CVE-2011-0711The xfs_fs_geometry function in fs/xfs/xfs_fsops.c in the Li…
• CVE-2011-0713Heap-based buffer overflow in wiretap/dct3trace.c in Wiresha…
• CVE-2011-0714Use-after-free vulnerability in a certain Red Hat patch for …
• CVE-2011-0715The mod_dav_svn module for the Apache HTTP Server, as distri…
• CVE-2011-0716The br_multicast_add_group function in net/bridge/br_multica…
• CVE-2011-0717Session fixation vulnerability in Red Hat Network (RHN) Sate…
• CVE-2011-0718Red Hat Network (RHN) Satellite Server 5.4 does not use a ti…