4.9

CVE-2011-2213

The inet_diag_bc_audit function in net/ipv4/inet_diag.c in the Linux kernel before 2.6.39.3 does not properly audit INET_DIAG bytecode, which allows local users to cause a denial of service (kernel infinite loop) via crafted INET_DIAG_REQ_BYTECODE instructions in a netlink message, as demonstrated by an INET_DIAG_BC_JMP instruction with a zero yes value, a different vulnerability than CVE-2010-3880.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 2.6.39.3
Redhat ≫ Enterprise Linux Aus Version5.6
Redhat ≫ Enterprise Linux Eus Version5.6
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.41% 0.327
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.9 3.9 6.9
AV:L/AC:L/Au:N/C:N/I:N/A:C
CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

http://marc.info/?l=bugtraq&m=139447903326211&w=2
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2011-0927.html
Third Party Advisory
http://article.gmane.org/gmane.linux.network/197206
Broken Link
http://article.gmane.org/gmane.linux.network/197208
Broken Link
http://article.gmane.org/gmane.linux.network/197386
Broken Link
http://article.gmane.org/gmane.linux.network/198809
Broken Link
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=eeb1497277d6b1a0a34ed36b97e18f2bd7d6de0d
http://patchwork.ozlabs.org/patch/100857/
Patch
Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39.3
Broken Link
http://www.openwall.com/lists/oss-security/2011/06/20/1
Third Party Advisory
Mailing List
http://www.openwall.com/lists/oss-security/2011/06/20/13
Third Party Advisory
Mailing List
http://www.openwall.com/lists/oss-security/2011/06/20/16
Third Party Advisory
Mailing List
https://bugzilla.redhat.com/show_bug.cgi?id=714536
Third Party Advisory
Issue Tracking