6.3 Medium
AI Score
Confidence
Low
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.089 Low
EPSS
Percentile
94.5%
The sfc (aka Solarflare Solarstorm) driver in the Linux kernel before 3.2.30 allows remote attackers to cause a denial of service (DMA descriptor consumption and network-controller outage) via crafted TCP packets that trigger a small MSS value.
lists.opensuse.org/opensuse-security-announce/2012-10/msg00005.html
rhn.redhat.com/errata/RHSA-2012-1323.html
rhn.redhat.com/errata/RHSA-2012-1324.html
rhn.redhat.com/errata/RHSA-2012-1347.html
rhn.redhat.com/errata/RHSA-2012-1375.html
rhn.redhat.com/errata/RHSA-2012-1401.html
rhn.redhat.com/errata/RHSA-2012-1430.html
secunia.com/advisories/50633
secunia.com/advisories/50732
secunia.com/advisories/50811
secunia.com/advisories/51193
www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.30
www.openwall.com/lists/oss-security/2012/08/03/4
www.ubuntu.com/usn/USN-1567-1
www.ubuntu.com/usn/USN-1568-1
www.ubuntu.com/usn/USN-1572-1
www.ubuntu.com/usn/USN-1575-1
www.ubuntu.com/usn/USN-1577-1
www.ubuntu.com/usn/USN-1578-1
www.ubuntu.com/usn/USN-1579-1
www.ubuntu.com/usn/USN-1580-1
bugzilla.redhat.com/show_bug.cgi?id=844714
github.com/torvalds/linux/commit/68cb695ccecf949d48949e72f8ce591fdaaa325c
www.suse.com/support/update/announcement/2012/suse-su-20121679-1.html