Denial Of Service (DoS)

2020-04-1000:39:34

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

JSON

The kernel vulnerable to denial of service (DoS). The Parallels Virtuozzo Containers team reported the RHSA-2009:1243 update introduced two flaws in the routing implementation. If an attacker was able to cause a large enough number of collisions in the routing hash table (via specially-crafted packets) for the emergency route flush to trigger, a deadlock could occur. Secondly, if the kernel routing cache was disabled, an uninitialized pointer would be left behind after a route lookup, leading to a kernel panic.

CPENameOperatorVersion
kerneleq2.6.18__128.el5
kerneleq2.6.18__128.2.1.el5
kerneleq2.6.18__92.1.18.el5
kerneleq2.6.18__92.el5
kerneleq2.6.18__8.1.4.el5
kerneleq2.6.18__128.1.1.el5
kerneleq2.6.18__164.9.1.el5
kerneleq2.6.18__8.1.14.el5
kerneleq2.6.18__92.1.17.el5
kerneleq2.6.18__53.1.13.el5

Name	Operator	Version
kernel	eq	2.6.18__128.el5
kernel	eq	2.6.18__128.2.1.el5
kernel	eq	2.6.18__92.1.18.el5
kernel	eq	2.6.18__92.el5
kernel	eq	2.6.18__8.1.4.el5
kernel	eq	2.6.18__128.1.1.el5
kernel	eq	2.6.18__164.9.1.el5
kernel	eq	2.6.18__8.1.14.el5
kernel	eq	2.6.18__92.1.17.el5
kernel	eq	2.6.18__53.1.13.el5