CVE-2011-2525

high
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

The qdisc_notify function in net/sched/sch_api.c in the Linux kernel before 2.6.35 does not prevent tc_fill_qdisc function calls referencing builtin (aka CQ_F_BUILTIN) Qdisc structures, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a crafted call.

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=53b0f08042f04813cd1a7473dacd3edfacb28eb3

http://kerneltrap.org/mailarchive/linux-netdev/2010/5/21/6277805

http://mirror.anl.gov/pub/linux/kernel/v2.6/ChangeLog-2.6.35

http://openwall.com/lists/oss-security/2011/07/12/1

http://rhn.redhat.com/errata/RHSA-2011-1065.html

http://rhn.redhat.com/errata/RHSA-2011-1163.html

https://bugzilla.redhat.com/show_bug.cgi?id=720552

Details

Source: MITRE

Published: 2012-02-02

Updated: 2020-08-04

Type: CWE-476

Risk Information

CVSS v2

Base Score: 7.2

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Impact Score: 10

Exploitability Score: 3.9

Severity: HIGH

CVSS v3

Base Score: 7.8

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Impact Score: 5.9

Exploitability Score: 1.8

Severity: HIGH

Tenable Plugins

View all (20 total)

IDNameProductFamilySeverity
89105VMware ESX / ESXi Service Console and Third-Party Libraries Multiple Vulnerabilities (VMSA-2012-0001) (remote check)NessusMisc.
high
83603SUSE SLES10 Security Update : kernel (SUSE-SU-2013:1832-1)NessusSuSE Local Security Checks
high
79507OracleVM 2.2 : kernel (OVMSA-2013-0039)NessusOracleVM Local Security Checks
high
75557openSUSE Security Update : kernel (openSUSE-SU-2012:0206-1)NessusSuSE Local Security Checks
high
68425Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2011-2037)NessusOracle Linux Local Security Checks
high
63996RHEL 5 : kernel (RHSA-2011:1163)NessusRed Hat Local Security Checks
high
59161SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 7915)NessusSuSE Local Security Checks
high
57749VMSA-2012-0001 : VMware ESXi and ESX updates to third-party library and ESX Service ConsoleNessusVMware ESX Local Security Checks
high
57659SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 7918)NessusSuSE Local Security Checks
high
57005Ubuntu 10.04 LTS : linux vulnerabilities (USN-1286-1)NessusUbuntu Local Security Checks
high
56943Ubuntu 10.04 LTS : linux-ec2 vulnerabilities (USN-1269-1)NessusUbuntu Local Security Checks
high
56916Ubuntu 10.10 : linux-mvl-dove vulnerabilities (USN-1274-1)NessusUbuntu Local Security Checks
high
56911Ubuntu 8.04 LTS : linux vulnerabilities (USN-1268-1)NessusUbuntu Local Security Checks
high
56768Ubuntu 10.04 LTS : linux-lts-backport-natty vulnerabilities (USN-1256-1)NessusUbuntu Local Security Checks
critical
56640USN-1241-1 : linux-fsl-imx51 vulnerabilitiesNessusUbuntu Local Security Checks
critical
56285Debian DSA-2310-1 : linux-2.6 - privilege escalation/denial of service/information leakNessusDebian Local Security Checks
medium
56265CentOS 5 : kernel (CESA-2011:1065)NessusCentOS Local Security Checks
high
56130Debian DSA-2303-2 : linux-2.6 - privilege escalation/denial of service/information leakNessusDebian Local Security Checks
critical
55645RHEL 5 : kernel (RHSA-2011:1065)NessusRed Hat Local Security Checks
high
801508CentOS RHSA-2011-1065 Security CheckLog Correlation EngineGeneric
high