CVEvulnerability

CVE-2011-1927

5.0 MEDIUM Published 2012-06-13 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2012-06-13
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The ip_expire function in net/ipv4/ip_fragment.c in the Linux kernel before 2.6.39 does not properly construct ICMP_TIME_EXCEEDED packets after a timeout, which allows remote attackers to cause a denial of service (invalid pointer dereference) via crafted fragmented packets.

Affected configurations

• linux linux kernel (<= 2.6.38.8) • linux linux kernel 2.6.38 • linux linux kernel 2.6.38.1 • linux linux kernel 2.6.38.2 • linux linux kernel 2.6.38.3 • linux linux kernel 2.6.38.4 • linux linux kernel 2.6.38.5 • linux linux kernel 2.6.38.6 • linux linux kernel 2.6.38.7

References

http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 ftp.osuosl.org
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=64f3b9e203bd06855072e295557dca1485a2ecba git.kernel.org
http://www.openwall.com/lists/oss-security/2011/05/18/2 www.openwall.com
https://github.com/torvalds/linux/commit/64f3b9e203bd06855072e295557dca1485a2ecba Exploit, Patch
http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 ftp.osuosl.org
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=64f3b9e203bd06855072e295557dca1485a2ecba git.kernel.org
http://www.openwall.com/lists/oss-security/2011/05/18/2 www.openwall.com
https://github.com/torvalds/linux/commit/64f3b9e203bd06855072e295557dca1485a2ecba Exploit, Patch