Lucene search

K
cve[email protected]CVE-2011-1547
HistoryMay 09, 2011 - 7:55 p.m.

CVE-2011-1547

2011-05-0919:55:03
CWE-119
web.nvd.nist.gov
34
cve-2011-1547
netbsd
kernel
ipsec
denial of service
memory corruption
panic
nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

High

0.025 Low

EPSS

Percentile

90.2%

Multiple stack consumption vulnerabilities in the kernel in NetBSD 4.0, 5.0 before 5.0.3, and 5.1 before 5.1.1, when IPsec is enabled, allow remote attackers to cause a denial of service (memory corruption and panic) or possibly have unspecified other impact via a crafted (1) IPv4 or (2) IPv6 packet with nested IPComp headers.

Affected configurations

NVD
Node
netbsdnetbsdMatch4.0
OR
netbsdnetbsdMatch5.0
OR
netbsdnetbsdMatch5.0.1
OR
netbsdnetbsdMatch5.0.2
OR
netbsdnetbsdMatch5.1

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

High

0.025 Low

EPSS

Percentile

90.2%