NVD

Id
8413  
Name
CVE-2011-1478  
Description
The napi_reuse_skb function in net/core/dev.c in the Generic Receive Offload (GRO) implementation in the Linux kernel before 2.6.38 does not reset the values of certain structure members, which might allow remote attackers to cause a denial of service (NULL pointer dereference) via a malformed VLAN frame.  
Reject
 
CVSS Version
2  
CVSS Score
5.7  
Severity
Medium  
CVSS Base Score
5.7  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
5.5  
CVSS Vector
(AV:A/AC:M/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-07  
Published
2011-10-23  
Modified Date
2012-05-13  
Seq
2011-1478  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
48211 8413 CVE-2011-1478 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=66c46d741e2e60f0e8b625b80edb0ab820c46d7a  View
48212 8413 CVE-2011-1478 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=6d152e23ad1a7a5b40fef1f42e017d66e6115159  View
48213 8413 CVE-2011-1478 http://mirror.anl.gov/pub/linux/kernel/v2.6/ChangeLog-2.6.38  View
48214 8413 CVE-2011-1478 [oss-security] 20110328 CVE-2011-1478 kernel: gro: reset dev and skb_iff on skb reuse  View
48215 8413 CVE-2011-1478 8480  View
48216 8413 CVE-2011-1478 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console  View
48217 8413 CVE-2011-1478 http://www.vmware.com/security/advisories/VMSA-2011-0012.html  View
48218 8413 CVE-2011-1478 https://bugzilla.redhat.com/show_bug.cgi?id=691270  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32361 JVNDB-2011-002601 Linux kernel の napi_reuse_skb 関数におけるサービス運用妨害 (NULL ポインタデリファレンス) の脆弱性 Linux kernel の Generic Receive Offload (GRO) 実装における net/core/dev.c の napi_reuse_skb 関数は、特定の構造体メンバの値をリセットしないため、サービス運用妨害 (NULL ポインタデリファレンス) 状態となる脆弱性が存在します。 CVE-2011-1478 49385 CVE-2011-1478 8413 5.7 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002601.html 2011-10-12 2012-12-25 View