CVE-2011-2942 - A certain Red Hat patch to the __br_deliver function in net/bridge/br_forward.c in the Linux kernel

CVE-2011-2942

Summary

A certain Red Hat patch to the __br_deliver function in net/bridge/br_forward.c in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging connectivity to a network interface that uses an Ethernet bridge device.

References

Vulnerable Configurations

cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*

CVSS

Base:	6.8 (as of 13-02-2023 - 01:20)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:M/Au:N/C:P/I:P/A:P

redhat via4

rpms

kernel-0:2.6.18-274.7.1.el5
kernel-PAE-0:2.6.18-274.7.1.el5
kernel-PAE-debuginfo-0:2.6.18-274.7.1.el5
kernel-PAE-devel-0:2.6.18-274.7.1.el5
kernel-debug-0:2.6.18-274.7.1.el5
kernel-debug-debuginfo-0:2.6.18-274.7.1.el5
kernel-debug-devel-0:2.6.18-274.7.1.el5
kernel-debuginfo-0:2.6.18-274.7.1.el5
kernel-debuginfo-common-0:2.6.18-274.7.1.el5
kernel-devel-0:2.6.18-274.7.1.el5
kernel-doc-0:2.6.18-274.7.1.el5
kernel-headers-0:2.6.18-274.7.1.el5
kernel-kdump-0:2.6.18-274.7.1.el5
kernel-kdump-debuginfo-0:2.6.18-274.7.1.el5
kernel-kdump-devel-0:2.6.18-274.7.1.el5
kernel-xen-0:2.6.18-274.7.1.el5
kernel-xen-debuginfo-0:2.6.18-274.7.1.el5
kernel-xen-devel-0:2.6.18-274.7.1.el5

refmap via4

confirm	https://bugzilla.redhat.com/show_bug.cgi?id=730917
mlist	[oss-security] 20111024 kernel; CVE-2011-2942 and CVE-2011-3209

Last major update

13-02-2023 - 01:20

Published

08-06-2013 - 13:05

Last modified

13-02-2023 - 01:20