CVE-2011-2942

Impact:
Moderate
Public Date:
2011-10-20
CWE:
CWE-476
Bugzilla:
730917: CVE-2011-2942 kernel: bridge: null pointer dereference in __br_deliver

The MITRE CVE dictionary describes this issue as:

A certain Red Hat patch to the __br_deliver function in net/bridge/br_forward.c in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging connectivity to a network interface that uses an Ethernet bridge device.

Find out more about CVE-2011-2942 from the MITRE CVE dictionary dictionary and NIST NVD.

Statement

This issue did not affect the Linux kernel as shipped with Red Hat Enterprise Linux 4, 6, and Red Hat Enterprise MRG. This has been addressed in Red Hat Enterprise Linux 5 via https://rhn.redhat.com/errata/RHSA-2011-1386.html.

CVSS v2 metrics

Base Score 6.1
Base Metrics AV:A/AC:L/Au:N/C:N/I:N/A:C
Access Vector Adjacent Network
Access Complexity Low
Authentication None
Confidentiality Impact None
Integrity Impact None
Availability Impact Complete

Find out more about Red Hat support for the Common Vulnerability Scoring System (CVSS).

Red Hat Security Errata

Platform Errata Release Date
RHEV Agents (VDSM) RHSA-2011:1408 2011-10-26
Red Hat Enterprise Linux 5 (kernel) RHSA-2011:1386 2011-10-20

Affected Packages State

Platform Package State
Red Hat Enterprise MRG 2 realtime-kernel Not affected
Red Hat Enterprise Linux 6 kernel Will not fix
Red Hat Enterprise Linux 4 kernel Not affected

Last Modified

CVE description copyright © 2017, The MITRE Corporation