VULNERABILITY INTELLIGENCE

CVE-2011-2905

CVSS score6.2 MEDIUM
EPSS probability0.40%
CISA KEVNot currently listed
Published2013-03-01
Last modified2026-06-16
CVSS vectorAV:L/AC:H/Au:N/C:C/I:C/A:C

Description

Untrusted search path vulnerability in the perf_config function in tools/perf/util/config.c in perf, as distributed in the Linux kernel before 3.1, allows local users to overwrite arbitrary files via a crafted config file in the current working directory.

Primary references