PT-2011-4044 · Linux+2 · Linux Kernel+2

Brent Meshier · Published 2011-09-06 · Updated 2023-02-13 · CVE-2011-2723

Positive Technologies (AI Summary)

CVSS v2.0

5.7

Medium

Base vector

AV:A/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.39.4

Description The issue allows remote attackers to cause a denial of service (system crash) via crafted network traffic. This is due to the skb gro header slow function resetting certain fields in incorrect situations when Generic Receive Offload (GRO) is enabled.

Recommendations For Linux kernel versions prior to 2.6.39.4, update to version 2.6.39.4 or later to resolve the issue.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2011-2723

DSA-2303-1

RHSA-2011:1321

RHSA-2011:1350

RHSA-2011:1386

RHSA-2011_1321

RHSA-2011_1350

RHSA-2011_1386

RHSA-2012:0010

Affected Products

Linux Kernel

Red Hat

Suse

References · 54

• https://bdu.fstec.ru/vul/2015-04607 · Security Note
• http://openwall.com/lists/oss-security/2011/07/28/13 · Patch
• http://openwall.com/lists/oss-security/2011/07/29/1 · Patch
• https://bdu.fstec.ru/vul/2015-04341 · Security Note
• https://linux.oracle.com/errata/ELSA-2011-2029.html · Vendor Advisory
• http://marc.info/?l=bugtraq&m=139447903326211&w=2 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04438 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=726552 · Patch
• https://bdu.fstec.ru/vul/2015-04439 · Security Note
• https://bdu.fstec.ru/vul/2015-04359 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2011-2723 · Security Note
• https://linux.oracle.com/errata/ELSA-2011-1350.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04437 · Security Note
• https://bdu.fstec.ru/vul/2015-04343 · Security Note
• http://redhat.com/support/errata/RHSA-2011-1321.html · Vendor Advisory