CVE-2011-1581

CVSS v2.0 9 (High)

EPSS 1.42 % (87^th)

Affected Products 1

Advisories 5

The bond_select_queue function in drivers/net/bonding/bond_main.c in the Linux kernel before 2.6.39, when a network device with a large number of receive queues is installed but the default tx_queues setting is used, does not properly restrict queue indexes, which allows remote attackers to cause a denial of service (BUG and system crash) or possibly have unspecified other impact by sending network traffic.

Weaknesses

CWE-20: Improper Input Validation

CVE Status: PUBLISHED
CNA: Red Hat, Inc.
Published Date: 2011-05-26 16:55:04
(13 years ago)
Updated Date: 2023-02-13 04:29:53
(19 months ago)

Affected Products

Linux

Linux Kernel

Configuration #1

		CPE23	From	Up To
	Linux Kernel prior 2.6.39 version	cpe:2.3:o:linux:linux_kernel		< 2.6.39