Lucene search

K
nvd[email protected]NVD:CVE-2011-0695
HistoryMar 15, 2011 - 5:55 p.m.

CVE-2011-0695

2011-03-1517:55:04
CWE-362
web.nvd.nist.gov
3

CVSS2

5.7

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:N/I:N/A:C

AI Score

7.3

Confidence

High

EPSS

0.006

Percentile

77.7%

Race condition in the cm_work_handler function in the InfiniBand driver (drivers/infiniband/core/cma.c) in Linux kernel 2.6.x allows remote attackers to cause a denial of service (panic) by sending an InfiniBand request while other request handlers are still running, which triggers an invalid pointer dereference.

Affected configurations

Nvd
Node
linuxlinux_kernelRange2.6.02.6.39.4
Node
redhatenterprise_linux_desktopMatch5.0
OR
redhatenterprise_linux_eusMatch5.6
OR
redhatenterprise_linux_serverMatch5.0
OR
redhatenterprise_linux_server_ausMatch5.6
OR
redhatenterprise_linux_workstationMatch5.0
Node
canonicalubuntu_linuxMatch8.04-

CVSS2

5.7

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:N/I:N/A:C

AI Score

7.3

Confidence

High

EPSS

0.006

Percentile

77.7%