CVE-2011-3188

Advisory lineage Upstream: 0 Downstream: 6
Modified
Published: 24 May 2012, 23:00
Last modified:06 Aug 2024, 23:22

Vulnerability Summary

Overall Risk (default)
high
70/100
CVSS Score
9.1 CRITICAL
v3.1 (nvd)
EPSS Score
4.32% LOW
4% probability -1.83%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

24 May 2012, 23:00
Published
Vulnerability first disclosed
06 Aug 2024, 23:22
Last Modified
Vulnerability information updated

Description

The (1) IPv4 and (2) IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes it easier for remote attackers to cause a denial of service (disrupted networking) or hijack network sessions by predicting these values and sending crafted packets.

CVSS Metrics

  • v3.1•CRITICAL•Score: 9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
  • v2.0•MEDIUM•Score: 6.4AV:N/AC:L/Au:N/C:N/I:P/A:P

EPSS Trends

Current EPSS score: 4.32%• Percentile: 89%

Affected Systems

  • f5•arx

    ≥ 6.0.0, ≤ 6.4.0

  • f5•big-ip_access_policy_manager

    ≥ 10.1.0, ≤ 10.2.4 | ≥ 11.0.0, ≤ 11.1.0

  • f5•big-ip_analytics

    ≥ 11.0.0, ≤ 11.1.0

  • f5•big-ip_application_security_manager

    ≥ 10.0.0, ≤ 10.2.4 | ≥ 11.0.0, ≤ 11.1.0

  • f5•big-ip_edge_gateway

    ≥ 10.1.0, ≤ 10.2.4 | ≥ 11.0.0, ≤ 11.1.0

  • f5•big-ip_global_traffic_manager

    ≥ 10.0.0, ≤ 10.2.4 | ≥ 11.0.0, ≤ 11.1.0

  • f5•big-ip_link_controller

    ≥ 10.0.0, ≤ 10.2.4 | ≥ 11.0.0, ≤ 11.1.0

  • f5•big-ip_local_traffic_manager

    ≥ 10.0.0, ≤ 10.2.4 | ≥ 11.0.0, ≤ 11.1.0

  • f5•big-ip_protocol_security_module

    ≥ 10.0.0, ≤ 10.2.4 | ≥ 11.0.0, ≤ 11.1.0

  • f5•big-ip_wan_optimization_manager

    ≥ 10.0.0, ≤ 10.2.4 | ≥ 11.0.0, ≤ 11.1.0

  • f5•big-ip_webaccelerator

    ≥ 10.0.0, ≤ 10.2.4 | ≥ 11.0.0, ≤ 11.1.0

  • f5•enterprise_manager

    ≥ 2.1.0, ≤ 2.3.0 | 3.0.0

  • f5•firepass

    ≥ 6.0.0, ≤ 6.1.0 | 7.0.0

  • linux•linux_kernel

    < 3.1

  • redhat•enterprise_linux

    4.0

References (9)