Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2011-3359

Опубликовано: 27 мар. 2011
Источник: redhat
CVSS2: 4.6
EPSS Низкий

Описание

The dma_rx function in drivers/net/wireless/b43/dma.c in the Linux kernel before 2.6.39 does not properly allocate receive buffers, which allows remote attackers to cause a denial of service (system crash) via a crafted frame.

Отчет

This issue did not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 4 and 5 as they did not provide support for Broadcom 43xx wireless devices. This has been addressed in Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1465.html, and https://rhn.redhat.com/errata/RHSA-2012-0010.html.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 4kernelNot affected
Red Hat Enterprise Linux 5kernelNot affected
Red Hat Enterprise Linux 6kernelFixedRHSA-2011:146522.11.2011
Red Hat Enterprise MRG 2kernel-rtFixedRHSA-2012:001010.01.2012

Показывать по

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=738202kernel: b43: allocate receive buffers big enough for max frame len + offset

EPSS

Процентиль: 74%
0.0085
Низкий

4.6 Medium

CVSS2

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 13 лет назад

The dma_rx function in drivers/net/wireless/b43/dma.c in the Linux kernel before 2.6.39 does not properly allocate receive buffers, which allows remote attackers to cause a denial of service (system crash) via a crafted frame.

CVSS3: 7.5
nvd
около 13 лет назад

The dma_rx function in drivers/net/wireless/b43/dma.c in the Linux kernel before 2.6.39 does not properly allocate receive buffers, which allows remote attackers to cause a denial of service (system crash) via a crafted frame.

CVSS3: 7.5
debian
около 13 лет назад

The dma_rx function in drivers/net/wireless/b43/dma.c in the Linux ker ...

CVSS3: 7.5
github
около 3 лет назад

The dma_rx function in drivers/net/wireless/b43/dma.c in the Linux kernel before 2.6.39 does not properly allocate receive buffers, which allows remote attackers to cause a denial of service (system crash) via a crafted frame.

oracle-oval
больше 13 лет назад

ELSA-2011-1465: kernel security and bug fix update (IMPORTANT)

EPSS

Процентиль: 74%
0.0085
Низкий

4.6 Medium

CVSS2