CVE-2011-2213

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2011-2213
The inet_diag_bc_audit function in net/ipv4/inet_diag.c in the Linux kernel before 2.6.39.3 does not properly audit INET_DIAG bytecode, which allows local users to cause a denial of service (kernel infinite loop) via crafted INET_DIAG_REQ_BYTECODE instructions in a netlink message, as demonstrated by an INET_DIAG_BC_JMP instruction with a zero yes value, a different vulnerability than CVE-2010-3880.

4.9 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 3.9 / Impact : 6.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References
Link Resource
http://article.gmane.org/gmane.linux.network/197206 Broken Link
http://article.gmane.org/gmane.linux.network/197208 Broken Link
http://article.gmane.org/gmane.linux.network/197386 Broken Link
http://article.gmane.org/gmane.linux.network/198809 Broken Link
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=eeb1497277d6b1a0a34ed36b97e18f2bd7d6de0d
http://marc.info/?l=bugtraq&m=139447903326211&w=2 Third Party Advisory
http://patchwork.ozlabs.org/patch/100857/ Patch Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2011-0927.html Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39.3 Broken Link
http://www.openwall.com/lists/oss-security/2011/06/20/1 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2011/06/20/13 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2011/06/20/16 Mailing List Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=714536 Issue Tracking Third Party Advisory
http://article.gmane.org/gmane.linux.network/197206 Broken Link
http://article.gmane.org/gmane.linux.network/197208 Broken Link
http://article.gmane.org/gmane.linux.network/197386 Broken Link
http://article.gmane.org/gmane.linux.network/198809 Broken Link
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=eeb1497277d6b1a0a34ed36b97e18f2bd7d6de0d
http://marc.info/?l=bugtraq&m=139447903326211&w=2 Third Party Advisory
http://patchwork.ozlabs.org/patch/100857/ Patch Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2011-0927.html Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39.3 Broken Link
http://www.openwall.com/lists/oss-security/2011/06/20/1 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2011/06/20/13 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2011/06/20/16 Mailing List Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=714536 Issue Tracking Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:redhat:enterprise_linux_aus:5.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:5.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*
History

21 Nov 2024, 01:27

Type Values Removed Values Added
References () http://article.gmane.org/gmane.linux.network/197206 - Broken Link () http://article.gmane.org/gmane.linux.network/197206 - Broken Link
References () http://article.gmane.org/gmane.linux.network/197208 - Broken Link () http://article.gmane.org/gmane.linux.network/197208 - Broken Link
References () http://article.gmane.org/gmane.linux.network/197386 - Broken Link () http://article.gmane.org/gmane.linux.network/197386 - Broken Link
References () http://article.gmane.org/gmane.linux.network/198809 - Broken Link () http://article.gmane.org/gmane.linux.network/198809 - Broken Link
References () http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=eeb1497277d6b1a0a34ed36b97e18f2bd7d6de0d - () http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=eeb1497277d6b1a0a34ed36b97e18f2bd7d6de0d -
References () http://marc.info/?l=bugtraq&m=139447903326211&w=2 - Third Party Advisory () http://marc.info/?l=bugtraq&m=139447903326211&w=2 - Third Party Advisory
References () http://patchwork.ozlabs.org/patch/100857/ - Patch, Third Party Advisory () http://patchwork.ozlabs.org/patch/100857/ - Patch, Third Party Advisory
References () http://rhn.redhat.com/errata/RHSA-2011-0927.html - Third Party Advisory () http://rhn.redhat.com/errata/RHSA-2011-0927.html - Third Party Advisory
References () http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39.3 - Broken Link () http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39.3 - Broken Link
References () http://www.openwall.com/lists/oss-security/2011/06/20/1 - Mailing List, Third Party Advisory () http://www.openwall.com/lists/oss-security/2011/06/20/1 - Mailing List, Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2011/06/20/13 - Mailing List, Third Party Advisory () http://www.openwall.com/lists/oss-security/2011/06/20/13 - Mailing List, Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2011/06/20/16 - Mailing List, Third Party Advisory () http://www.openwall.com/lists/oss-security/2011/06/20/16 - Mailing List, Third Party Advisory
References () https://bugzilla.redhat.com/show_bug.cgi?id=714536 - Issue Tracking, Third Party Advisory () https://bugzilla.redhat.com/show_bug.cgi?id=714536 - Issue Tracking, Third Party Advisory
Information

Published : 2011-08-29 18:55

Updated : 2024-11-21 01:27

NVD link : CVE-2011-2213

Mitre link : CVE-2011-2213

CVE.ORG link : CVE-2011-2213

JSON object : View

Products Affected

redhat

  • enterprise_linux_workstation
  • enterprise_linux_aus
  • enterprise_linux_server
  • enterprise_linux_eus
  • enterprise_linux_desktop

linux

  • linux_kernel
CWE
CWE-835

Loop with Unreachable Exit Condition ('Infinite Loop')