PT-2013-1409 · Linux+2 · Linux Kernel+2

Published 2011-11-22 · Updated 2023-02-13 · CVE-2011-3593

Positive Technologies (AI Summary)

CVSS v2.0

5.7

Medium

Base vector

AV:A/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel version 2.6.32 on Red Hat Enterprise Linux (RHEL) 6

Description The issue allows remote attackers to cause a denial of service, resulting in a system crash, by sending priority-tagged VLAN frames. This is due to a problem in the vlan hwaccel do receive function in net/8021q/vlan core.c.

Recommendations For Linux kernel version 2.6.32 on Red Hat Enterprise Linux (RHEL) 6, consider applying the Red Hat patch to resolve the issue. As a temporary workaround, restrict the reception of priority-tagged VLAN frames to minimize the risk of exploitation.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2011-3593

RHSA-2011:1465

RHSA-2011_1465

Affected Products

Linux Kernel

Red Hat

Suse

References · 24

• https://bdu.fstec.ru/vul/2015-04359 · Security Note
• https://linux.oracle.com/errata/ELSA-2011-1465.html · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=742846 · Vendor Advisory
• https://bdu.fstec.ru/vul/2014-00070 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2011-3593 · Security Note
• https://linux.oracle.com/errata/ELSA-2011-2033.html · Vendor Advisory
• https://github.com/torvalds/linux/commit/c85ce65ecac078ab1a1835c87c4a6319cf74660a · Note
• https://access.redhat.com/security/cve/CVE-2011-3593 · Note
• https://access.redhat.com/security/cve/CVE-2011-3353 · Note
• http://openwall.com/lists/oss-security/2012/03/05/3 · Note
• https://access.redhat.com/security/cve/CVE-2011-1577 · Note
• https://access.redhat.com/security/cve/CVE-2011-4326 · Note
• https://access.redhat.com/security/cve/CVE-2011-3191 · Note
• https://access.redhat.com/security/cve/CVE-2011-2699 · Note
• https://access.redhat.com/security/cve/CVE-2011-2494 · Note