Published: 10/10/2011 Updated: 13/02/2023

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 785

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

net/core/net_namespace.c in the Linux kernel 2.6.32 and previous versions does not properly handle a high rate of creation and cleanup of network namespaces, which makes it easier for remote malicious users to cause a denial of service (memory consumption) via requests to a daemon that requires a separate namespace per connection, as demonstrated by vsftpd.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
redhat enterprise linux 6.0
redhat enterprise mrg 2.0
canonical ubuntu linux 10.10
canonical ubuntu linux 11.04
canonical ubuntu linux 11.10
canonical ubuntu linux 10.04
debian debian linux 5.0
debian debian linux 7.0
debian debian linux 6.0

Debian Bug report logs - #622741 vsftpd: upgrade stable to fix remote DoS (CVE-2011-0762) Package: vsftpd; Maintainer for vsftpd is Keng-Yu Lin <kengyu@lexicaltw>; Source for vsftpd is src:vsftpd (PTS, buildd, popcon) Reported by: Dario Vieli <dario@wualacom> Date: Thu, 14 Apr 2011 10:42:08 UTC Severity: important ...

Vsftpd or other applications could be made to crash if vsftpd received specially crafted network traffic ...

source: wwwsecurityfocuscom/bid/50938/info The Linux kernel is prone to a remote denial-of-service vulnerability An attacker can exploit this issue to cause an out-of-memory error in certain linux applications, resulting in denial-of-service conditions Linux kernel versions 2635 and earlier are affected $ for i in 1 2 3 4 5 6 7 8 ...

CWE-400 http://www.debian.org/security/2011/dsa-2305 http://www.openwall.com/lists/oss-security/2011/06/06/20 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629373 https://bugs.launchpad.net/ubuntu/+source/linux/+bug/720095 http://kerneltrap.org/mailarchive/git-commits-head/2009/12/8/15289 https://bugzilla.redhat.com/show_bug.cgi?id=711245 http://www.openwall.com/lists/oss-security/2011/06/06/10 https://bugzilla.redhat.com/show_bug.cgi?id=711134 http://patchwork.ozlabs.org/patch/88217/http://ie.archive.ubuntu.com/linux/kernel/v2.6/ChangeLog-2.6.33 http://www.ubuntu.com/usn/USN-1288-1 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f875bae065334907796da12523f9df85c89f5712 http://neil.brown.name/git?p=linux-2.6%3Ba=patch%3Bh=2b035b39970740722598f7a9d548835f9bdd730f http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2b035b39970740722598f7a9d548835f9bdd730f https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622741 https://usn.ubuntu.com/1288-1/https://nvd.nist.gov https://www.exploit-db.com/exploits/36425/

CVE-2011-2189

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect