CVE-2011-2189

Published: Oct 10, 2011Modified: Apr 29, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

net/core/net_namespace.c in the Linux kernel 2.6.32 and earlier does not properly handle a high rate of creation and cleanup of network namespaces, which makes it easier for remote attackers to cause a denial of service (memory consumption) via requests to a daemon that requires a separate namespace per connection, as demonstrated by vsftpd.

Affected (10)

Products: Linux: Linux Kernel · Redhat: Enterprise Linux, Enterprise Mrg · Canonical: Ubuntu Linux · +1 more

Show all products

Linux: Linux Kernel · Redhat: Enterprise Linux, Enterprise Mrg · Canonical: Ubuntu Linux · Debian: Debian Linux

1 product

2 products

Enterprise Linux

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 2.6.32

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 6.0
Redhat Enterprise Mrg	Version 2.0

Configuration C

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04
Canonical Ubuntu Linux	Version 10.10
Canonical Ubuntu Linux	Version 11.04
Canonical Ubuntu Linux	Version 11.10

Configuration D

3 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 5.0
Debian Debian Linux	Version 6.0
Debian Debian Linux	Version 7.0

Related CWEs

Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References (28)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629373

Source: secalert@redhat.com

ExploitMailing ListThird Party Advisory

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2b035b39970740722598f7a9d548835f9bdd730f

Source: secalert@redhat.com

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f875bae065334907796da12523f9df85c89f5712

Source: secalert@redhat.com

http://ie.archive.ubuntu.com/linux/kernel/v2.6/ChangeLog-2.6.33

Source: secalert@redhat.com

Broken Link

http://kerneltrap.org/mailarchive/git-commits-head/2009/12/8/15289

Source: secalert@redhat.com

Broken Link

http://neil.brown.name/git?p=linux-2.6%3Ba=patch%3Bh=2b035b39970740722598f7a9d548835f9bdd730f

Source: secalert@redhat.com

http://patchwork.ozlabs.org/patch/88217/

Source: secalert@redhat.com

Mailing ListPatchThird Party Advisory

http://www.debian.org/security/2011/dsa-2305

Source: secalert@redhat.com

Third Party Advisory

http://www.openwall.com/lists/oss-security/2011/06/06/10

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2011/06/06/20

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.ubuntu.com/usn/USN-1288-1

Source: secalert@redhat.com

Third Party Advisory

https://bugs.launchpad.net/ubuntu/+source/linux/+bug/720095

Source: secalert@redhat.com

ExploitThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=711134

Source: secalert@redhat.com

ExploitIssue TrackingThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=711245

Source: secalert@redhat.com

ExploitIssue TrackingPatchThird Party Advisory

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629373

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitMailing ListThird Party Advisory

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2b035b39970740722598f7a9d548835f9bdd730f

Source: af854a3a-2127-422b-91ae-364da2661108

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f875bae065334907796da12523f9df85c89f5712

Source: af854a3a-2127-422b-91ae-364da2661108

http://ie.archive.ubuntu.com/linux/kernel/v2.6/ChangeLog-2.6.33

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://kerneltrap.org/mailarchive/git-commits-head/2009/12/8/15289

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://neil.brown.name/git?p=linux-2.6%3Ba=patch%3Bh=2b035b39970740722598f7a9d548835f9bdd730f

Source: af854a3a-2127-422b-91ae-364da2661108

http://patchwork.ozlabs.org/patch/88217/

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatchThird Party Advisory

http://www.debian.org/security/2011/dsa-2305

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.openwall.com/lists/oss-security/2011/06/06/10

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2011/06/06/20

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.ubuntu.com/usn/USN-1288-1

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://bugs.launchpad.net/ubuntu/+source/linux/+bug/720095

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=711134

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=711245

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingPatchThird Party Advisory

Timeline

No history available yet.