2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2011-3188" ,
"sourceIdentifier" : "secalert@redhat.com" ,
"published" : "2012-05-24T23:55:02.213" ,
2024-12-08 03:06:42 +00:00
"lastModified" : "2024-11-21T01:29:56.183" ,
2023-04-24 12:24:31 +02:00
"vulnStatus" : "Modified" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "The (1) IPv4 and (2) IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes it easier for remote attackers to cause a denial of service (disrupted networking) or hijack network sessions by predicting these values and sending crafted packets."
} ,
{
"lang" : "es" ,
"value" : "Las implementaciones de (1) IPv4 y (2) IPv6 en el kernel de Linux antes de v3.1 utiliza una versi\u00f3n modificada de algoritmo MD4 para generar n\u00fameros de secuencia y valores de los fragmentos de identificaci\u00f3n, lo que hace que sea m\u00e1s f\u00e1cil para los atacantes remotos causar una denegaci\u00f3n de servicio (red interrumpida) o secuestrar sesiones de red mediante la predicci\u00f3n de estos valores y el env\u00edo de paquetes manipulados."
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" ,
2024-12-08 03:06:42 +00:00
"baseScore" : 9.1 ,
"baseSeverity" : "CRITICAL" ,
2023-04-24 12:24:31 +02:00
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "HIGH" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "HIGH"
2023-04-24 12:24:31 +02:00
} ,
"exploitabilityScore" : 3.9 ,
"impactScore" : 5.2
}
] ,
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P" ,
2024-12-08 03:06:42 +00:00
"baseScore" : 6.4 ,
2023-04-24 12:24:31 +02:00
"accessVector" : "NETWORK" ,
"accessComplexity" : "LOW" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "PARTIAL" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "PARTIAL"
2023-04-24 12:24:31 +02:00
} ,
"baseSeverity" : "MEDIUM" ,
"exploitabilityScore" : 10.0 ,
"impactScore" : 4.9 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : false
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "NVD-CWE-Other"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "3.1" ,
"matchCriteriaId" : "156989A4-23D9-434A-B512-9C0F3583D13D"
}
]
}
]
} ,
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:redhat:enterprise_linux:4.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "6172AF57-B26D-45F8-BE3A-F75ABDF28F49"
}
]
}
]
} ,
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:arx:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "6.0.0" ,
"versionEndIncluding" : "6.4.0" ,
"matchCriteriaId" : "F20E6644-F925-4283-AD92-7B0696F52310"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "10.1.0" ,
"versionEndIncluding" : "10.2.4" ,
"matchCriteriaId" : "79618AB4-7A8E-4488-8608-57EC2F8681FE"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "11.0.0" ,
"versionEndIncluding" : "11.1.0" ,
"matchCriteriaId" : "0483E71B-931F-4566-AD6F-D5ABF64FFA06"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "11.0.0" ,
"versionEndIncluding" : "11.1.0" ,
"matchCriteriaId" : "47A1E3F1-F319-4A75-9211-29B273E76F03"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "10.0.0" ,
"versionEndIncluding" : "10.2.4" ,
"matchCriteriaId" : "667D3780-3949-41AC-83DE-5BCB8B36C382"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "11.0.0" ,
"versionEndIncluding" : "11.1.0" ,
"matchCriteriaId" : "2EDED2D2-B85B-4680-9970-A6CE3343422C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "10.1.0" ,
"versionEndIncluding" : "10.2.4" ,
"matchCriteriaId" : "A8347412-DC42-4B86-BF6E-A44A5E1541ED"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "11.0.0" ,
"versionEndIncluding" : "11.1.0" ,
"matchCriteriaId" : "06D3514D-B1C2-4304-96DA-A84847104AF6"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "10.0.0" ,
"versionEndIncluding" : "10.2.4" ,
"matchCriteriaId" : "7B5AF8C8-578E-4FD7-8BAA-53A57EE4C653"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "11.0.0" ,
"versionEndIncluding" : "11.1.0" ,
"matchCriteriaId" : "142D050F-0D22-4D21-AB14-3AD0500A6D3F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "10.0.0" ,
"versionEndIncluding" : "10.2.4" ,
"matchCriteriaId" : "1DF6BB8A-FA63-4DBC-891C-256FF23CBCF0"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "11.0.0" ,
"versionEndIncluding" : "11.1.0" ,
"matchCriteriaId" : "EFC44375-AF21-4438-9FF9-244095DEA2B7"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "10.0.0" ,
"versionEndIncluding" : "10.2.4" ,
"matchCriteriaId" : "289CEABB-22A2-436D-AE4B-4BDA2D0EAFDB"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "11.0.0" ,
"versionEndIncluding" : "11.1.0" ,
"matchCriteriaId" : "412829BD-A98B-4AD5-8B93-2C4C20AC15D8"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_protocol_security_module:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "10.0.0" ,
"versionEndIncluding" : "10.2.4" ,
"matchCriteriaId" : "2C0B4C01-C71E-4E35-B63A-68395984E033"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_protocol_security_module:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "11.0.0" ,
"versionEndIncluding" : "11.1.0" ,
"matchCriteriaId" : "EF7C328A-E18A-425E-B38F-996CC96D402E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_wan_optimization_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "10.0.0" ,
"versionEndIncluding" : "10.2.4" ,
"matchCriteriaId" : "BB60C39D-52ED-47DD-9FB9-2B4BC8D9F8AC"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_wan_optimization_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "11.0.0" ,
"versionEndIncluding" : "11.1.0" ,
"matchCriteriaId" : "D1DB046D-1AC3-4F5C-95BF-31BBCE1C44BE"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "10.0.0" ,
"versionEndIncluding" : "10.2.4" ,
"matchCriteriaId" : "AE007A64-5867-4B1A-AEFB-3AB2CD6A5EA4"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "11.0.0" ,
"versionEndIncluding" : "11.1.0" ,
"matchCriteriaId" : "9BD1D6A6-50A8-4794-8C7B-E3C3BC48A262"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:enterprise_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "2.1.0" ,
"versionEndIncluding" : "2.3.0" ,
"matchCriteriaId" : "0ADD1B04-9F78-40B3-8314-6935277073B0"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:enterprise_manager:3.0.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "125C8A19-4F51-42DD-BA11-F299721EFBB5"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:firepass:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "6.0.0" ,
"versionEndIncluding" : "6.1.0" ,
"matchCriteriaId" : "15CE213B-F42C-4C2E-AFBD-852AB049FF8A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:firepass:7.0.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "442D343A-973B-4C33-B99B-1EA2B7670DE5"
}
]
}
]
}
] ,
"references" : [
{
"url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6e5714eaf77d79ae1c8b47e3e040ff5411b717ec" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bc0b96b54a21246e377122d54569eef71cec535f" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://marc.info/?l=bugtraq&m=139447903326211&w=2" ,
"source" : "secalert@redhat.com" ,
"tags" : [
"Mailing List" ,
"Third Party Advisory"
]
} ,
{
"url" : "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1" ,
"source" : "secalert@redhat.com" ,
"tags" : [
"Mailing List" ,
"Patch" ,
"Vendor Advisory"
]
} ,
{
"url" : "http://www.openwall.com/lists/oss-security/2011/08/23/2" ,
"source" : "secalert@redhat.com" ,
"tags" : [
"Mailing List" ,
"Patch" ,
"Third Party Advisory"
]
} ,
{
"url" : "https://bugzilla.redhat.com/show_bug.cgi?id=732658" ,
"source" : "secalert@redhat.com" ,
"tags" : [
"Issue Tracking" ,
"Patch" ,
"Third Party Advisory"
]
} ,
{
"url" : "https://github.com/torvalds/linux/commit/6e5714eaf77d79ae1c8b47e3e040ff5411b717ec" ,
"source" : "secalert@redhat.com" ,
"tags" : [
"Patch" ,
"Third Party Advisory"
]
} ,
{
"url" : "https://github.com/torvalds/linux/commit/bc0b96b54a21246e377122d54569eef71cec535f" ,
"source" : "secalert@redhat.com" ,
"tags" : [
"Patch" ,
"Third Party Advisory"
]
} ,
{
"url" : "https://support.f5.com/csp/article/K15301?utm_source=f5support&%3Butm_medium=RSS" ,
"source" : "secalert@redhat.com"
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6e5714eaf77d79ae1c8b47e3e040ff5411b717ec" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bc0b96b54a21246e377122d54569eef71cec535f" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://marc.info/?l=bugtraq&m=139447903326211&w=2" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Mailing List" ,
"Third Party Advisory"
]
} ,
{
"url" : "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Mailing List" ,
"Patch" ,
"Vendor Advisory"
]
} ,
{
"url" : "http://www.openwall.com/lists/oss-security/2011/08/23/2" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Mailing List" ,
"Patch" ,
"Third Party Advisory"
]
} ,
{
"url" : "https://bugzilla.redhat.com/show_bug.cgi?id=732658" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Issue Tracking" ,
"Patch" ,
"Third Party Advisory"
]
} ,
{
"url" : "https://github.com/torvalds/linux/commit/6e5714eaf77d79ae1c8b47e3e040ff5411b717ec" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch" ,
"Third Party Advisory"
]
} ,
{
"url" : "https://github.com/torvalds/linux/commit/bc0b96b54a21246e377122d54569eef71cec535f" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch" ,
"Third Party Advisory"
]
} ,
{
"url" : "https://support.f5.com/csp/article/K15301?utm_source=f5support&%3Butm_medium=RSS" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
2023-04-24 12:24:31 +02:00
}
]
}
