PT-2011-4399 · Red Hat · Red Hat

Published 2011-10-20 · Updated 2023-02-13 · CVE-2011-3347

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:A/AC:H/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux (RHEL) 6 kernel package versions prior to 2.6.32-218.el6

Description The issue allows remote attackers to cause a denial of service, resulting in a system crash, by sending non-member VLAN packets when promiscuous mode is enabled.

Recommendations For versions prior to 2.6.32-218.el6, apply the Red Hat patch to the be2net implementation in the kernel package to resolve the issue. As a temporary workaround, consider disabling promiscuous mode until the patch is applied.

Fix

Related Identifiers

CVE-2011-3347

RHSA-2011:1386

RHSA-2011:1530

RHSA-2011_1386

RHSA-2011_1530

RHSA-2012:0116

USN-1404-1

USN-1405-1

USN-1409-1

USN-1412-1

Affected Products

Red Hat

References · 50

• https://linux.oracle.com/errata/ELSA-2011-1530.html · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1412-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04437 · Security Note
• https://bdu.fstec.ru/vul/2015-04439 · Security Note
• https://bdu.fstec.ru/vul/2015-04438 · Security Note
• https://bdu.fstec.ru/vul/2015-04359 · Security Note
• https://ubuntu.com/security/notices/USN-1404-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1405-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2011-3347 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2011-3347 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2011-3347 · Security Note
• https://bdu.fstec.ru/vul/2015-04607 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2011-3347 · Security Note
• https://ubuntu.com/security/notices/USN-1409-1 · Vendor Advisory
• https://github.com/torvalds/linux/commit/764355487ea220fdc2faf128d577d7f679b91f97 · Note