Lucene search

K
cveRedhatCVE-2011-0695
HistoryMar 15, 2011 - 5:55 p.m.

CVE-2011-0695

2011-03-1517:55:04
CWE-362
redhat
web.nvd.nist.gov
66
cve-2011-0695
race condition
infiniband driver
linux kernel 2.6.x
denial of service
remote attackers
nvd

CVSS2

5.7

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:N/I:N/A:C

AI Score

6.2

Confidence

High

EPSS

0.006

Percentile

77.7%

Race condition in the cm_work_handler function in the InfiniBand driver (drivers/infiniband/core/cma.c) in Linux kernel 2.6.x allows remote attackers to cause a denial of service (panic) by sending an InfiniBand request while other request handlers are still running, which triggers an invalid pointer dereference.

Affected configurations

Nvd
Node
linuxlinux_kernelRange2.6.02.6.39.4
Node
redhatenterprise_linux_desktopMatch5.0
OR
redhatenterprise_linux_eusMatch5.6
OR
redhatenterprise_linux_serverMatch5.0
OR
redhatenterprise_linux_server_ausMatch5.6
OR
redhatenterprise_linux_workstationMatch5.0
Node
canonicalubuntu_linuxMatch8.04-
VendorProductVersionCPE
linuxlinux_kernelcpe:/o:linux:linux_kernel::::

CVSS2

5.7

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:N/I:N/A:C

AI Score

6.2

Confidence

High

EPSS

0.006

Percentile

77.7%