Ubuntu.comUB:CVE-2011-2482CVE-2011-2482
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.011 Low
EPSS
Percentile
84.5%
A certain Red Hat patch to the sctp_sock_migrate function in
net/sctp/socket.c in the Linux kernel before 2.6.21, as used in Red Hat
Enterprise Linux (RHEL) 5, allows remote attackers to cause a denial of
service (NULL pointer dereference and OOPS) via a crafted SCTP packet.
Bugs
- <https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2482>
- <https://launchpad.net/bugs/869234>
Notes
| Author | Note |
|---|---|
| apw | this bug was introduced by a flawed backport of commit ea2bc483ff5caada7c4aa0d5fbf87d3a6590273d to the RHEL kernel, this was mainlined in v2.6.21 and therefore no existing release has this backported |
Related
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.011 Low
EPSS
Percentile
84.5%