Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2011-4081

Опубликовано: 24 мая 2012
Источник: nvd
CVSS3: 5.5
CVSS2: 4.9
EPSS Низкий

Описание

crypto/ghash-generic.c in the Linux kernel before 3.1 allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact by triggering a failed or missing ghash_setkey function call, followed by a (1) ghash_update function call or (2) ghash_final function call, as demonstrated by a write operation on an AF_ALG socket.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Версия до 3.1 (исключая)

EPSS

Процентиль: 18%
0.00058
Низкий

5.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 13 лет назад

crypto/ghash-generic.c in the Linux kernel before 3.1 allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact by triggering a failed or missing ghash_setkey function call, followed by a (1) ghash_update function call or (2) ghash_final function call, as demonstrated by a write operation on an AF_ALG socket.

redhat
больше 13 лет назад

crypto/ghash-generic.c in the Linux kernel before 3.1 allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact by triggering a failed or missing ghash_setkey function call, followed by a (1) ghash_update function call or (2) ghash_final function call, as demonstrated by a write operation on an AF_ALG socket.

CVSS3: 5.5
debian
около 13 лет назад

crypto/ghash-generic.c in the Linux kernel before 3.1 allows local use ...

CVSS3: 5.5
github
около 3 лет назад

crypto/ghash-generic.c in the Linux kernel before 3.1 allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact by triggering a failed or missing ghash_setkey function call, followed by a (1) ghash_update function call or (2) ghash_final function call, as demonstrated by a write operation on an AF_ALG socket.

oracle-oval
больше 13 лет назад

ELSA-2012-2003: Unbreakable Enterprise kernel security and bug fix update (IMPORTANT)

EPSS

Процентиль: 18%
0.00058
Низкий

5.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-476