PT-2011-4044 · Linux+2 · Linux Kernel+2

Brent Meshier · Publicado 2011-09-06 · Atualizado 2023-02-13 · CVE-2011-2723

Positive Technologies (AI Summary)

CVSS v2.0

5.7

Média

Vetor base

AV:A/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.39.4

Description The issue allows remote attackers to cause a denial of service (system crash) via crafted network traffic. This is due to the skb gro header slow function resetting certain fields in incorrect situations when Generic Receive Offload (GRO) is enabled.

Recommendations For Linux kernel versions prior to 2.6.39.4, update to version 2.6.39.4 or later to resolve the issue.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2011-2723

DSA-2303-1

RHSA-2011:1321

RHSA-2011:1350

RHSA-2011:1386

RHSA-2011_1321

RHSA-2011_1350

RHSA-2011_1386

RHSA-2012:0010

Produtos afetados

Linux Kernel

Red Hat

Suse

Referências · 54

• https://github.com/torvalds/linux/commit/764355487ea220fdc2faf128d577d7f679b91f97 · Nota
• https://github.com/torvalds/linux/commit/f8bd2258e2d520dff28c855658bd24bdafb5102d · Nota
• https://github.com/torvalds/linux/commit/982134ba62618c2d69fbbbd166d0a11ee3b7e3d8 · Nota
• https://github.com/torvalds/linux/commit/1309d7afbed112f0e8e90be9af975550caa0076b · Nota
• https://github.com/torvalds/linux/commit/4ff67b720c02c36e54d55b88c2931879b7db1cd2 · Nota
• https://access.redhat.com/security/cve/CVE-2011-2918 · Nota
• https://access.redhat.com/errata/RHSA-2011:1386 · Nota
• https://access.redhat.com/security/cve/CVE-2011-2942 · Nota
• https://bdu.fstec.ru/vul/2015-04607 · Nota de Segurança
• http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39.4 · Nota
• https://access.redhat.com/security/cve/CVE-2011-3209 · Nota
• https://access.redhat.com/security/cve/CVE-2011-3191 · Nota
• http://openwall.com/lists/oss-security/2011/07/28/13 · Correção
• https://access.redhat.com/security/cve/CVE-2011-2699 · Nota
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=4ff67b720c02c36e54d55b88c2931879b7db1cd2 · Nota