CVE-2011-3188: f5 arx
Vulnerability summary
CVE-2011-3188 is a critical (CVSS 9.1) vulnerability in f5 arx. EPSS estimates a 5.03% chance of exploitation in the next 30 days, higher than 92.2% of scored vulnerabilities.
Severe, CVSS 9.1 (NVD); no exploitation reported by the 5 checked sources; EPSS 5% (FIRST, 03-11-2026)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 6Timeline
- 24-05-2012PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The (1) IPv4 and (2) IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes it easier for remote attackers to cause a denial of service (disrupted networking) or hijack network sessions by predicting these values and sending crafted packets.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
5.03%
Chance of exploitation in the next 30 days
Percentile
92%
Versus all other CVEs
30-day change
No change 0.00 pp
From 5.03% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
F513 products
- arx≥ 6.0.0, ≤ 6.4.0
- big-ip_access_policy_manager≥ 10.1.0, ≤ 10.2.4 | ≥ 11.0.0, ≤ 11.1.0
- big-ip_analytics≥ 11.0.0, ≤ 11.1.0
- big-ip_application_security_manager≥ 10.0.0, ≤ 10.2.4 | ≥ 11.0.0, ≤ 11.1.0
- big-ip_edge_gateway≥ 10.1.0, ≤ 10.2.4 | ≥ 11.0.0, ≤ 11.1.0
Linux1 product
- linux_kernel< 3.1
Redhat1 product
- enterprise_linuxEOL4.0
3 vendors · 15 products
References
9 links- github.com/torvalds/linux/commit/bc0b96b54a21246e377122d54569eef71cec535fX Refsource CONFIRMPatchThird Party Advisory
- www.openwall.com/lists/oss-security/2011/08/23/2Mailing ListX Refsource MLISTPatchThird Party Advisory
- github.com/torvalds/linux/commit/6e5714eaf77d79ae1c8b47e3e040ff5411b717ecX Refsource CONFIRMPatchThird Party Advisory
- git.kernel.orgX Refsource CONFIRM
- bugzilla.redhat.com/show_bug.cgi?id=732658X Refsource CONFIRMIssue TrackingPatchThird Party Advisory
- www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1X Refsource CONFIRMMailing ListPatchVendor Advisory
- marc.info?l=bugtraq&m=139447903326211&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
- git.kernel.orgX Refsource CONFIRM
- support.f5.com/csp/article/K15301?utm_source=f5support&%3Butm_medium=RSSX Refsource CONFIRM