CVE-2011-1768

Published: Jun 13, 2012Modified: Apr 29, 2026

5.4

Vector

AV:N/AC:H/Au:N/C:N/I:N/A:C

Exploitability: 4.9 / Impact: 6.9

Source: NVD

Description

The tunnels implementation in the Linux kernel before 2.6.34, when tunnel functionality is configured as a module, allows remote attackers to cause a denial of service (OOPS) by sending a packet during module loading.

Affected (21)

Products: Linux: Linux Kernel

1 product

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 2.6.33.20
Linux Linux Kernel	Version 2.6.33.10
Linux Linux Kernel	Version 2.6.33.11
Linux Linux Kernel	Version 2.6.33.12
Linux Linux Kernel	Version 2.6.33.13
Linux Linux Kernel	Version 2.6.33.14
Linux Linux Kernel	Version 2.6.33.15
Linux Linux Kernel	Version 2.6.33.16
Linux Linux Kernel	Version 2.6.33.17
Linux Linux Kernel	Version 2.6.33.18
Linux Linux Kernel	Version 2.6.33.19
Linux Linux Kernel	Version 2.6.33.1
Linux Linux Kernel	Version 2.6.33.2
Linux Linux Kernel	Version 2.6.33.3
Linux Linux Kernel	Version 2.6.33.4
Linux Linux Kernel	Version 2.6.33.5
Linux Linux Kernel	Version 2.6.33.6
Linux Linux Kernel	Version 2.6.33.7
Linux Linux Kernel	Version 2.6.33.8
Linux Linux Kernel	Version 2.6.33.9
Linux Linux Kernel	Version 2.6.33

Related CWEs

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References (10)

http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34

Source: secalert@redhat.com

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d5aa407f59f5b83d2c50ec88f5bf56d40f1f8978

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2011/05/05/6

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=702303

Source: secalert@redhat.com

https://github.com/torvalds/linux/commit/d5aa407f59f5b83d2c50ec88f5bf56d40f1f8978

Source: secalert@redhat.com

ExploitPatch

http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34

Source: af854a3a-2127-422b-91ae-364da2661108

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d5aa407f59f5b83d2c50ec88f5bf56d40f1f8978

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2011/05/05/6

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=702303

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/torvalds/linux/commit/d5aa407f59f5b83d2c50ec88f5bf56d40f1f8978

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

Timeline

No history available yet.