CVE-2011-0714

Use-after-free vulnerability in a certain Red Hat patch for the RPC server sockets functionality in the Linux kernel 2.6.32 on Red Hat Enterprise Linux (RHEL) 6 might allow remote attackers to cause a denial of service (crash) via malformed data in a packet, related to lockd and the svc_xprt_received function.

CVSS v2.0 5.7 MEDIUM

5.7^/10

CVSS v2.0 : MEDIUM

Vector : AV:A/AC:M/Au:N/C:N/I:N/A:C

Exploitability : 5.5 / Impact : 6.9

Access Vector ADJACENT_NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
http://openwall.com/lists/oss-security/2011/03/08/17
http://openwall.com/lists/oss-security/2011/03/09/1
https://bugzilla.redhat.com/show_bug.cgi?id=678144
https://rhn.redhat.com/errata/RHSA-2011-0329.html	Vendor Advisory
http://openwall.com/lists/oss-security/2011/03/08/17
http://openwall.com/lists/oss-security/2011/03/09/1
https://bugzilla.redhat.com/show_bug.cgi?id=678144
https://rhn.redhat.com/errata/RHSA-2011-0329.html	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:linux:linux_kernel:2.6.32:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*

History

21 Nov 2024, 01:24

Type	Values Removed	Values Added
References	~~() http://openwall.com/lists/oss-security/2011/03/08/17 -~~	() http://openwall.com/lists/oss-security/2011/03/08/17 -
References	~~() http://openwall.com/lists/oss-security/2011/03/09/1 -~~	() http://openwall.com/lists/oss-security/2011/03/09/1 -
References	~~() https://bugzilla.redhat.com/show_bug.cgi?id=678144 -~~	() https://bugzilla.redhat.com/show_bug.cgi?id=678144 -
References	~~() https://rhn.redhat.com/errata/RHSA-2011-0329.html - Vendor Advisory~~	() https://rhn.redhat.com/errata/RHSA-2011-0329.html - Vendor Advisory

Information

Published : 2011-05-04 22:55

Updated : 2024-11-21 01:24

NVD link : CVE-2011-0714

Mitre link : CVE-2011-0714

CVE.ORG link : CVE-2011-0714

JSON object : View

Products Affected

linux

linux_kernel

redhat

enterprise_linux

CWE

CWE-399

Resource Management Errors

{"id": "CVE-2011-0714", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.7, "accessVector": "ADJACENT_NETWORK", "vectorString": "AV:A/AC:M/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 5.5, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2011-05-04T22:55:02.687", "references": [{"url": "http://openwall.com/lists/oss-security/2011/03/08/17", "source": "secalert@redhat.com"}, {"url": "http://openwall.com/lists/oss-security/2011/03/09/1", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=678144", "source": "secalert@redhat.com"}, {"url": "https://rhn.redhat.com/errata/RHSA-2011-0329.html", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://openwall.com/lists/oss-security/2011/03/08/17", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://openwall.com/lists/oss-security/2011/03/09/1", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=678144", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://rhn.redhat.com/errata/RHSA-2011-0329.html", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-399"}]}], "descriptions": [{"lang": "en", "value": "Use-after-free vulnerability in a certain Red Hat patch for the RPC server sockets functionality in the Linux kernel 2.6.32 on Red Hat Enterprise Linux (RHEL) 6 might allow remote attackers to cause a denial of service (crash) via malformed data in a packet, related to lockd and the svc_xprt_received function."}, {"lang": "es", "value": "Vulnerabilidad de tipo \"use-after-free\" (usar despu\u00e9s de liberar) en un determinado parche de Red Hat para la funcionalidad de sockets de servidor RPC del kernel de Linux 2.6.32 de Red Hat Enterprise Linux (RHEL) 6. Puede permitir a atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda) a trav\u00e9s de datos mal formados en un paquete. Relacionado con lockd y la funci\u00f3n svc_xprt_received."}], "lastModified": "2024-11-21T01:24:40.557", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.32:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "46568A0D-F374-4DAB-9B64-FCC74A9AA07B"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "secalert@redhat.com"}