CVE-2011-3191

Integer signedness error in the CIFSFindNext function in fs/cifs/cifssmb.c in the Linux kernel before 3.1 allows remote CIFS servers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a large length value in a response to a read request for a directory.

• CWE-119

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9438fabb73eb48055b58b89fc51e0bc4db22fabd
• http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1Mailing List, Patch, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2011/08/24/2Mailing List, Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=732869Issue Tracking, Patch, Third Party Advisory
• https://github.com/torvalds/linux/commit/9438fabb73eb48055b58b89fc51e0bc4db22fabdPatch, Third Party Advisory
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9438fabb73eb48055b58b89fc51e0bc4db22fabd
• http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1Mailing List, Patch, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2011/08/24/2Mailing List, Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=732869Issue Tracking, Patch, Third Party Advisory
• https://github.com/torvalds/linux/commit/9438fabb73eb48055b58b89fc51e0bc4db22fabdPatch, Third Party Advisory

Published

May 24, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-3185gtkutils.c in Pidgin before 2.10.0 on Windows allows user-as…
• CVE-2011-3186CRLF injection vulnerability in actionpack/lib/action_contro…
• CVE-2011-3187The to_s method in actionpack/lib/action_dispatch/middleware…
• CVE-2011-3188The (1) IPv4 and (2) IPv6 implementations in the Linux kerne…9.1
• CVE-2011-3189The crypt function in PHP 5.3.7, when the MD5 hash type is u…
• CVE-2011-3190Certain AJP protocol connector implementations in Apache Tom…
• CVE-2011-3192The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x …
• CVE-2011-3193Heap-based buffer overflow in the Lookup_MarkMarkPos functio…
• CVE-2011-3194Buffer overflow in the TIFF reader in gui/image/qtiffhandler…
• CVE-2011-3195shared/inc/sql/lists.php in Domain Technologie Control (DTC)…
• CVE-2011-3196The setup script in Domain Technologie Control (DTC) before …
• CVE-2011-3197SQL injection vulnerability in Domain Technologie Control (D…