Veracode Vulnerability DatabaseVERACODE:24649Denial Of Service (DoS)
0.0004 Low
EPSS
Percentile
5.1%
kernel is vulnerable to denial of service. A flaw was found in the way the Linux Ethernet bridge implementation handled certain IGMP (Internet Group Management Protocol) packets. A local, unprivileged user on a system that has a network interface in an Ethernet bridge could use this flaw to crash that system.
References
docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Technical_Notes/ape.html#RHSA-2011-0421
ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6b0d6a9b4296fa16a28d10d416db7a770fc03287
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=6b0d6a9b4296fa16a28d10d416db7a770fc03287
www.openwall.com/lists/oss-security/2011/02/17/2
access.redhat.com/errata/RHSA-2011:0421
access.redhat.com/security/updates/classification/#important
bugzilla.redhat.com/show_bug.cgi?id=678169
github.com/torvalds/linux/commit/6b0d6a9b4296fa16a28d10d416db7a770fc03287
Related
