Ubuntu.comUB:CVE-2011-3347CVE-2011-3347
4.6 Medium
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:A/AC:H/Au:N/C:N/I:N/A:C
0.003 Low
EPSS
Percentile
65.5%
A certain Red Hat patch to the be2net implementation in the kernel package
before 2.6.32-218.el6 on Red Hat Enterprise Linux (RHEL) 6, when
promiscuous mode is enabled, allows remote attackers to cause a denial of
service (system crash) via non-member VLAN packets.
Bugs
Notes
| Author | Note |
|---|---|
| apw | https://bugzilla.redhat.com/show_bug.cgi?id=748691 looks to be 4 commits to fix: ecd0bf0f7b280bac3ac7419ed3aac84cd92878e9 4c5102f94c175d81790a3a288e85efd4a8a1649a c0e64ef4899df4cedc872871e54e2c069d29e519 343e43c02850a3abcd22bd144e5bdbc92fdd273c issue looks to be exposed by: 1da87b7fafebb7874622602f79a5fec0425aede7. the last of these commits is a change to the use of unlikely and therefore not really part of the fix, therefore dropping: 343e43c02850a3abcd22bd144e5bdbc92fdd273c |
References
launchpad.net/bugs/cve/CVE-2011-3347
nvd.nist.gov/vuln/detail/CVE-2011-3347
security-tracker.debian.org/tracker/CVE-2011-3347
ubuntu.com/security/notices/USN-1404-1
ubuntu.com/security/notices/USN-1405-1
ubuntu.com/security/notices/USN-1409-1
ubuntu.com/security/notices/USN-1412-1
www.cve.org/CVERecord?id=CVE-2011-3347
Related
4.6 Medium
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:A/AC:H/Au:N/C:N/I:N/A:C
0.003 Low
EPSS
Percentile
65.5%