CVE-2011-4124

NameCVE-2011-4124
DescriptionInput validation issues were found in Calibre at devices/linux_mount_helper.c which can lead to argument injection and elevation of privileges.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs584915

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
calibre (PTS)buster3.39.1+dfsg-3fixed
bullseye5.12.0+dfsg-1+deb11u1fixed
bookworm6.13.0+repack-2+deb12u3fixed
trixie7.5.1+ds-3fixed
sid7.7.0+ds-2fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
calibresource(unstable)1.5.0+dfsg-1584915

Notes

Vulnerable code removed upstream at version 1.4.0
https://github.com/kovidgoyal/calibre/commit/7d54d25844efebfb3d6de2bb2b9af77dbf72d8b8 (v1.4.0)
Removed by Debian packaging in 0.6.54+dfsg-1.

Search for package or bug name: Reporting problems