CVE

Id
48621  
CVE No.
CVE-2011-0709  
Status
Candidate  
Description
The br_mdb_ip_get function in net/bridge/br_multicast.c in the Linux kernel before 2.6.35-rc5 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via an IGMP packet, related to lack of a multicast table.  
Phase
Assigned (20110131)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
528493 48621 CVE-2011-0709 MLIST:[netdev] 20100705 bridge br_multicast: BUG: unable to handle kernel NULL pointer dereference  View
528494 48621 CVE-2011-0709 URL:http://www.spinics.net/lists/netdev/msg134414.html  View
528495 48621 CVE-2011-0709 MLIST:[netdev] 20100706 Re: bridge br_multicast: BUG: unable to handle kernel NULL pointer dereference  View
528496 48621 CVE-2011-0709 URL:http://www.spinics.net/lists/netdev/msg134444.html  View
528497 48621 CVE-2011-0709 MLIST:[oss-security] 20110216 CVE request - kernel: bridge br_multicast NULL pointer dereference  View
528498 48621 CVE-2011-0709 URL:http://openwall.com/lists/oss-security/2011/02/16/1  View
528499 48621 CVE-2011-0709 MLIST:[oss-security] 20110216 Re: CVE request - kernel: bridge br_multicast NULL pointer dereference  View
528500 48621 CVE-2011-0709 URL:http://openwall.com/lists/oss-security/2011/02/16/8  View
528501 48621 CVE-2011-0709 MLIST:[oss-security] 20110216 Re: CVE request - kernel: bridge br_multicast NULL pointer dereference  View
528502 48621 CVE-2011-0709 URL:http://openwall.com/lists/oss-security/2011/02/16/14  View
528503 48621 CVE-2011-0709 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=7f285fa78d4b81b8458f05e77fb6b46245121b4e  View
528504 48621 CVE-2011-0709 CONFIRM:http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.35/ChangeLog-2.6.35-rc5  View
528505 48621 CVE-2011-0709 BID:41432  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
31504 JVNDB-2011-001744 Linux kernel の RPC サーバソケット機能におけるサービス運用妨害 (クラッシュ) の脆弱性 Linux kernel の RPC サーバソケット機能用 Red Hat パッチには、lockd および svc_xprt_received 関数の処理に関して不備があるため、サービス運用妨害 (クラッシュ) 状態となる脆弱性が存在します。 CVE-2011-0714 48621 5.7 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001744.html  View