Lucene search
HistoryJun 13, 2012 - 10:24 a.m.
CVE-2011-1927
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
5.6 Medium
AI Score
Confidence
High
0.007 Low
EPSS
Percentile
81.1%
The ip_expire function in net/ipv4/ip_fragment.c in the Linux kernel before 2.6.39 does not properly construct ICMP_TIME_EXCEEDED packets after a timeout, which allows remote attackers to cause a denial of service (invalid pointer dereference) via crafted fragmented packets.
Affected configurations
Node
linuxlinux_kernelRange≤2.6.38.8
ORlinuxlinux_kernelMatch2.6.38
ORlinuxlinux_kernelMatch2.6.38rc1
ORlinuxlinux_kernelMatch2.6.38rc2
ORlinuxlinux_kernelMatch2.6.38rc3
ORlinuxlinux_kernelMatch2.6.38rc4
ORlinuxlinux_kernelMatch2.6.38rc5
ORlinuxlinux_kernelMatch2.6.38rc6
ORlinuxlinux_kernelMatch2.6.38rc7
ORlinuxlinux_kernelMatch2.6.38rc8
ORlinuxlinux_kernelMatch2.6.38.1
ORlinuxlinux_kernelMatch2.6.38.2
ORlinuxlinux_kernelMatch2.6.38.3
ORlinuxlinux_kernelMatch2.6.38.4
ORlinuxlinux_kernelMatch2.6.38.5
ORlinuxlinux_kernelMatch2.6.38.6
ORlinuxlinux_kernelMatch2.6.38.7
Related
prion
prion
Null pointer dereference
2012-06-13 10:24:00
redhatcve
redhatcve
CVE-2011-1927
2015-10-30 10:26:33
cve
cve
CVE-2011-1927
2012-06-13 10:24:54
seebug
seebug
Linux Kernel "ip_expire()"拒绝服务漏洞
2011-05-20 00:00:00
ubuntucve
ubuntucve
CVE-2011-1927
2011-05-18 00:00:00
cvelist
cvelist
CVE-2011-1927
2012-06-13 10:00:00
nessus
nessus
Ubuntu 10.10 : linux vulnerabilities (USN-1379-1)
2012-02-29 00:00:00
USN-1383-1 : linux-ti-omap4 vulnerabilities
2012-03-07 00:00:00
Ubuntu 10.04 LTS : linux-lts-backport-maverick vulnerabilities (USN-1387-1)
2012-03-07 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-1379-1)
2012-03-07 00:00:00
Ubuntu Update for linux USN-1379-1
2012-03-07 00:00:00
Ubuntu: Security Advisory (USN-1383-1)
2012-03-07 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2012-02-28 00:00:00
Linux kernel (OMAP4) vulnerabilities
2012-03-06 00:00:00
Linux kernel (Maverick backport) vulnerabilities
2012-03-06 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
5.6 Medium
AI Score
Confidence
High
0.007 Low
EPSS
Percentile
81.1%
Related for NVD:CVE-2011-1927