CVE - CVE-2011-3188

CVE-ID
CVE-2011-3188	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The (1) IPv4 and (2) IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes it easier for remote attackers to cause a denial of service (disrupted networking) or hijack network sessions by predicting these values and sending crafted packets.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:HPSBGN02970 URL:http://marc.info/?l=bugtraq&m=139447903326211&w=2 MISC:[oss-security] 20110823 Re: CVE request: kernel: change in how tcp seq numbers are generated URL:http://www.openwall.com/lists/oss-security/2011/08/23/2 MISC:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6e5714eaf77d79ae1c8b47e3e040ff5411b717ec URL:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6e5714eaf77d79ae1c8b47e3e040ff5411b717ec MISC:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bc0b96b54a21246e377122d54569eef71cec535f URL:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bc0b96b54a21246e377122d54569eef71cec535f MISC:http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1 URL:http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=732658 URL:https://bugzilla.redhat.com/show_bug.cgi?id=732658 MISC:https://github.com/torvalds/linux/commit/6e5714eaf77d79ae1c8b47e3e040ff5411b717ec URL:https://github.com/torvalds/linux/commit/6e5714eaf77d79ae1c8b47e3e040ff5411b717ec MISC:https://github.com/torvalds/linux/commit/bc0b96b54a21246e377122d54569eef71cec535f URL:https://github.com/torvalds/linux/commit/bc0b96b54a21246e377122d54569eef71cec535f MISC:https://support.f5.com/csp/article/K15301?utm_source=f5support&amp%3Butm_medium=RSS URL:https://support.f5.com/csp/article/K15301?utm_source=f5support&amp%3Butm_medium=RSS
Assigning CNA
Red Hat, Inc.
Date Record Created
20110819	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20110819)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)

Site Map | Terms of Use | Privacy Policy | Contact Us | Follow CVE

Use of the CVE® List and the associated references from this website are subject to the terms of use. CVE is sponsored by the U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA). Copyright © 1999–2024, The MITRE Corporation. CVE and the CVE logo are registered trademarks of The MITRE Corporation.