CVE-2011-1576

2011-08-3123:55:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2011-1576

linux kernel

denial of service

gro

red hat enterprise linux

memory leak

memory corruption

vulnerability

7.2 High

AI Score

Confidence

High

5.7 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:N/I:N/A:C

0.009 Low

EPSS

Percentile

82.4%

JSON

The Generic Receive Offload (GRO) implementation in the Linux kernel 2.6.18 on Red Hat Enterprise Linux 5 and 2.6.32 on Red Hat Enterprise Linux 6, as used in Red Hat Enterprise Virtualization (RHEV) Hypervisor and other products, allows remote attackers to cause a denial of service via crafted VLAN packets that are processed by the napi_reuse_skb function, leading to (1) a memory leak or (2) memory corruption, a different vulnerability than CVE-2011-1478.

CPENameOperatorVersion
linux:linux_kernellinux linux kerneleq2.6.18
redhat:enterprise_linuxredhat enterprise linuxeq5
redhat:enterprise_linuxredhat enterprise linuxeq6.0
redhat:enterprise_virtualization_hypervisorredhat enterprise virtualization hypervisoreq*

CPE	Name	Operator	Version
linux:linux_kernel	linux linux kernel	eq	2.6.18
redhat:enterprise_linux	redhat enterprise linux	eq	5
redhat:enterprise_linux	redhat enterprise linux	eq	6.0
redhat:enterprise_virtualization_hypervisor	redhat enterprise virtualization hypervisor	eq	*