6.9 Medium
AI Score
Confidence
Low
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.089 Low
EPSS
Percentile
94.4%
The sfc (aka Solarflare Solarstorm) driver in the Linux kernel before 3.2.30 allows remote attackers to cause a denial of service (DMA descriptor consumption and network-controller outage) via crafted TCP packets that trigger a small MSS value.
CPE | Name | Operator | Version |
---|---|---|---|
ubuntu_linux | eq | 11.04 | |
ubuntu_linux | eq | 11.10 | |
ubuntu_linux | eq | 10.04 | |
ubuntu_linux | eq | 12.04 | |
linux_kernel | lt | 3.0.44 | |
linux_kernel | ge | 3.1 | |
linux_kernel | lt | 3.2.30 | |
linux_kernel | ge | 3.3 | |
linux_kernel | lt | 3.4.12 | |
linux_kernel | ge | 3.5 |
lists.opensuse.org/opensuse-security-announce/2012-10/msg00005.html
rhn.redhat.com/errata/RHSA-2012-1323.html
rhn.redhat.com/errata/RHSA-2012-1324.html
rhn.redhat.com/errata/RHSA-2012-1347.html
rhn.redhat.com/errata/RHSA-2012-1375.html
rhn.redhat.com/errata/RHSA-2012-1401.html
rhn.redhat.com/errata/RHSA-2012-1430.html
secunia.com/advisories/50633
secunia.com/advisories/50732
secunia.com/advisories/50811
secunia.com/advisories/51193
www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.30
www.openwall.com/lists/oss-security/2012/08/03/4
www.ubuntu.com/usn/USN-1567-1
www.ubuntu.com/usn/USN-1568-1
www.ubuntu.com/usn/USN-1572-1
www.ubuntu.com/usn/USN-1575-1
www.ubuntu.com/usn/USN-1577-1
www.ubuntu.com/usn/USN-1578-1
www.ubuntu.com/usn/USN-1579-1
www.ubuntu.com/usn/USN-1580-1
bugzilla.redhat.com/show_bug.cgi?id=844714
github.com/torvalds/linux/commit/68cb695ccecf949d48949e72f8ce591fdaaa325c
www.suse.com/support/update/announcement/2012/suse-su-20121679-1.html