CVE-2011-1770

Integer underflow in the dccp_parse_options function (net/dccp/options.c) in the Linux kernel before 2.6.33.14 allows remote attackers to cause a denial of service via a Datagram Congestion Control Protocol (DCCP) packet with an invalid feature options length, which triggers a buffer over-read.

• CWE-191

• http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061236.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061366.htmlPatch, Third Party Advisory
• http://marc.info/?l=linux-kernel&m=130468845209036&w=2Patch, Third Party Advisory
• http://marc.info/?l=linux-kernel&m=130469305815140&w=2Patch, Third Party Advisory
• http://secunia.com/advisories/44932Third Party Advisory, Vendor Advisory
• http://securityreason.com/securityalert/8286Third Party Advisory
• http://www.kernel.org/pub/linux/kernel/v2.6/longterm/v2.6.33/ChangeLog-2.6.33.14Release Notes, Vendor Advisory
• http://www.securityfocus.com/bid/47769Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1025592Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=703011Issue Tracking, Patch, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061236.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061366.htmlPatch, Third Party Advisory
• http://marc.info/?l=linux-kernel&m=130468845209036&w=2Patch, Third Party Advisory
• http://marc.info/?l=linux-kernel&m=130469305815140&w=2Patch, Third Party Advisory
• http://secunia.com/advisories/44932Third Party Advisory, Vendor Advisory
• http://securityreason.com/securityalert/8286Third Party Advisory
• http://www.kernel.org/pub/linux/kernel/v2.6/longterm/v2.6.33/ChangeLog-2.6.33.14Release Notes, Vendor Advisory
• http://www.securityfocus.com/bid/47769Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1025592Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=703011Issue Tracking, Patch, Third Party Advisory

Published

Jun 24, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-1764Format string vulnerability in the dkim_exim_verify_finish f…
• CVE-2011-1765Cross-site scripting (XSS) vulnerability in MediaWiki before…
• CVE-2011-1766includes/User.php in MediaWiki before 1.16.5, when wgBlockDi…
• CVE-2011-1767net/ipv4/ip_gre.c in the Linux kernel before 2.6.34, when ip…
• CVE-2011-1768The tunnels implementation in the Linux kernel before 2.6.34…
• CVE-2011-1769SystemTap 1.4 and earlier, when unprivileged (aka stapusr) m…
• CVE-2011-1771The cifs_close function in fs/cifs/file.c in the Linux kerne…7.8
• CVE-2011-1772Multiple cross-site scripting (XSS) vulnerabilities in XWork…
• CVE-2011-1773virt-v2v before 0.8.4 does not preserve the VNC console pass…
• CVE-2011-1774WebKit in Apple Safari before 5.0.6 has improper libxslt sec…
• CVE-2011-1775The CSecurityTLS::processMsg function in common/rfb/CSecurit…
• CVE-2011-1776The is_gpt_valid function in fs/partitions/efi.c in the Linu…6.1