Denial Of Service (DoS)

2020-04-1001:05:13

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

5.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:N/I:N/A:C

JSON

Kernel is vulnerable to a denial of service. It is due to a flaw in net/ipv4/ip_gre.c in the Linux kernel, when ip_gre is configured as a module, allowing remote attackers to cause a denial of service (OOPS) by sending a packet during module loading.

CPENameOperatorVersion
kernel-rteq2.6.33.9__rt31.74.el6rt
kernel-rteq2.6.33.9__rt31.66.el6rt
kerneleq2.6.32__131.2.1.el6
kerneleq2.6.32__71.14.1.el6
kerneleq2.6.32__71.18.1.el6
kerneleq2.6.32__131.0.15.el6
kerneleq2.6.32__71.7.1.el6
kerneleq2.6.32__71.29.1.el6
kerneleq2.6.32__131.4.1.el6
kerneleq2.6.32__71.el6

Name	Operator	Version
kernel-rt	eq	2.6.33.9__rt31.74.el6rt
kernel-rt	eq	2.6.33.9__rt31.66.el6rt
kernel	eq	2.6.32__131.2.1.el6
kernel	eq	2.6.32__71.14.1.el6
kernel	eq	2.6.32__71.18.1.el6
kernel	eq	2.6.32__131.0.15.el6
kernel	eq	2.6.32__71.7.1.el6
kernel	eq	2.6.32__71.29.1.el6
kernel	eq	2.6.32__131.4.1.el6
kernel	eq	2.6.32__71.el6