1. Home
  2. Vulnerabilities
  3. CVE-2011-1576

CVE-2011-1576

CVSS v2.0 5.7 (Medium)
57% Progress
EPSS 0.89 % (83th)
0.89% Progress
Affected Products 3
Advisories 16
Info CVSS EPSS CAPEC Affected Configurations References Security Advisories Packages & Software OVAL Tools, Exploits & PoC Graph Web & Social Timeline

The Generic Receive Offload (GRO) implementation in the Linux kernel 2.6.18 on Red Hat Enterprise Linux 5 and 2.6.32 on Red Hat Enterprise Linux 6, as used in Red Hat Enterprise Virtualization (RHEV) Hypervisor and other products, allows remote attackers to cause a denial of service via crafted VLAN packets that are processed by the napi_reuse_skb function, leading to (1) a memory leak or (2) memory corruption, a different vulnerability than CVE-2011-1478.

Weaknesses
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
Related CVEs
CVE Status
PUBLISHED
CNA
Red Hat, Inc.
Published Date
2011-08-31 23:55:01
(13 years ago)
Updated Date
2023-02-13 01:19:16
(19 months ago)

Affected Products

Linux

Redhat

Configuration #1

AND
    CPE23 From Up To
OR  
  Linux Kernel 2.6.18 cpe:2.3:o:linux:linux_kernel:2.6.18
OR  
  Running on/with
  Redhat Enterprise Linux 5 cpe:2.3:o:redhat:enterprise_linux:5

Configuration #2

AND
    CPE23 From Up To
OR  
  Redhat Enterprise Virtualization Hypervisor cpe:2.3:a:redhat:enterprise_virtualization_hypervisor
OR  
  Running on/with
  Redhat Enterprise Linux 6.0 cpe:2.3:o:redhat:enterprise_linux:6.0