CVE-2011-1770

high
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

Integer underflow in the dccp_parse_options function (net/dccp/options.c) in the Linux kernel before 2.6.33.14 allows remote attackers to cause a denial of service via a Datagram Congestion Control Protocol (DCCP) packet with an invalid feature options length, which triggers a buffer over-read.

References

http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061236.html

http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061366.html

http://marc.info/?l=linux-kernel&m=130468845209036&w=2

http://marc.info/?l=linux-kernel&m=130469305815140&w=2

http://secunia.com/advisories/44932

http://securityreason.com/securityalert/8286

http://www.kernel.org/pub/linux/kernel/v2.6/longterm/v2.6.33/ChangeLog-2.6.33.14

http://www.securityfocus.com/bid/47769

http://www.securitytracker.com/id?1025592

https://bugzilla.redhat.com/show_bug.cgi?id=703011

Details

Source: MITRE

Published: 2011-06-24

Updated: 2020-07-27

Type: CWE-191

Risk Information

CVSS v2

Base Score: 7.8

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

Impact Score: 6.9

Exploitability Score: 10

Severity: HIGH

CVSS v3

Base Score: 7.5

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score: 3.6

Exploitability Score: 3.9

Severity: HIGH

Tenable Plugins

View all (19 total)

IDNameProductFamilySeverity
76634RHEL 6 : MRG (RHSA-2011:1253)NessusRed Hat Local Security Checks
high
75882openSUSE Security Update : kernel (openSUSE-SU-2012:0236-1)NessusSuSE Local Security Checks
high
75557openSUSE Security Update : kernel (openSUSE-SU-2012:0206-1)NessusSuSE Local Security Checks
high
68418Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2011-2019)NessusOracle Linux Local Security Checks
high
68277Oracle Linux 6 : kernel (ELSA-2011-0836)NessusOracle Linux Local Security Checks
high
56257USN-1212-1 : linux-ti-omap4 vulnerabilitiesNessusUbuntu Local Security Checks
high
56193Ubuntu 10.04 LTS : linux-lts-backport-maverick vulnerabilities (USN-1205-1)NessusUbuntu Local Security Checks
high
56192USN-1204-1 : linux-fsl-imx51 vulnerabilitiesNessusUbuntu Local Security Checks
high
56190USN-1202-1 : linux-ti-omap4 vulnerabilitiesNessusUbuntu Local Security Checks
high
56189Ubuntu 10.10 : linux vulnerabilities (USN-1201-1)NessusUbuntu Local Security Checks
high
55606Ubuntu 10.04 LTS : linux vulnerabilities (USN-1168-1)NessusUbuntu Local Security Checks
high
55591Ubuntu 11.04 : linux vulnerabilities (USN-1167-1)NessusUbuntu Local Security Checks
medium
55590Ubuntu 10.04 LTS : linux-ec2 vulnerabilities (USN-1161-1)NessusUbuntu Local Security Checks
high
55589Ubuntu 10.10 : linux-mvl-dove vulnerabilities (USN-1159-1)NessusUbuntu Local Security Checks
high
55521Ubuntu 10.04 LTS : linux-mvl-dove vulnerabilities (USN-1162-1)NessusUbuntu Local Security Checks
high
55053Fedora 14 : kernel-2.6.35.13-92.fc14 (2011-7551)NessusFedora Local Security Checks
high
55028Debian DSA-2240-1 : linux-2.6 - privilege escalation/denial of service/information leakNessusDebian Local Security Checks
high
54980Fedora 15 : kernel-2.6.38.7-30.fc15 (2011-7823)NessusFedora Local Security Checks
high
54941RHEL 6 : kernel (RHSA-2011:0836)NessusRed Hat Local Security Checks
high