Lucene search

K
cveRedhatCVE-2011-1076
HistoryOct 05, 2011 - 2:56 a.m.

CVE-2011-1076

2011-10-0502:56:24
CWE-476
redhat
web.nvd.nist.gov
92
4
cve-2011-1076
linux kernel
dns resolver
denial of service
remote code execution
nvd

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

AI Score

8.6

Confidence

High

EPSS

0.001

Percentile

34.4%

net/dns_resolver/dns_key.c in the Linux kernel before 2.6.38 allows remote DNS servers to cause a denial of service (NULL pointer dereference and OOPS) by not providing a valid response to a DNS query, as demonstrated by an erroneous grand.centrall.org query, which triggers improper handling of error data within a DNS resolver key.

Affected configurations

Nvd
Node
linuxlinux_kernelRange<2.6.38
VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Social References

More

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

AI Score

8.6

Confidence

High

EPSS

0.001

Percentile

34.4%