Lucene search

K
cvelistRedhatCVELIST:CVE-2011-1927
HistoryJun 13, 2012 - 10:00 a.m.

CVE-2011-1927

2012-06-1310:00:00
redhat
www.cve.org

5.8 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

81.1%

The ip_expire function in net/ipv4/ip_fragment.c in the Linux kernel before 2.6.39 does not properly construct ICMP_TIME_EXCEEDED packets after a timeout, which allows remote attackers to cause a denial of service (invalid pointer dereference) via crafted fragmented packets.

5.8 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

81.1%