Published: 29/08/2011 Updated: 13/02/2023

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

VMScore: 437

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

The inet_diag_bc_audit function in net/ipv4/inet_diag.c in the Linux kernel prior to 2.6.39.3 does not properly audit INET_DIAG bytecode, which allows local users to cause a denial of service (kernel infinite loop) via crafted INET_DIAG_REQ_BYTECODE instructions in a netlink message, as demonstrated by an INET_DIAG_BC_JMP instruction with a zero yes value, a different vulnerability than CVE-2010-3880.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
redhat enterprise linux server 5.0
redhat enterprise linux workstation 5.0
redhat enterprise linux desktop 5.0
redhat enterprise linux eus 5.6
redhat enterprise linux aus 5.6

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leak The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2009-4067 Rafael Dominguez Vega of MWR InfoSecurity reported an issue in the auerswald module, a driver for ...

Several security issues were fixed in the kernel ...

Multiple kernel flaws have been fixed ...

Several security issues were fixed in the kernel ...

Multiple kernel flaws have been fixed ...

CWE-835 https://bugzilla.redhat.com/show_bug.cgi?id=714536 http://article.gmane.org/gmane.linux.network/197208 http://www.openwall.com/lists/oss-security/2011/06/20/13 http://article.gmane.org/gmane.linux.network/197386 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39.3 http://article.gmane.org/gmane.linux.network/198809 http://www.openwall.com/lists/oss-security/2011/06/20/16 http://patchwork.ozlabs.org/patch/100857/http://article.gmane.org/gmane.linux.network/197206 http://www.openwall.com/lists/oss-security/2011/06/20/1 http://rhn.redhat.com/errata/RHSA-2011-0927.html http://marc.info/?l=bugtraq&m=139447903326211&w=2 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=eeb1497277d6b1a0a34ed36b97e18f2bd7d6de0d https://nvd.nist.gov https://www.debian.org/security/./dsa-2310 https://usn.ubuntu.com/1241-1/

CVE-2011-2213

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect