CVE-2011-4326: avaya 96x1_ip_deskphone_firmware Resource Management Errors
Vulnerability summary
CVE-2011-4326 is a high (CVSS 7.1) Resource Management Errors vulnerability in avaya 96x1_ip_deskphone_firmware. EPSS estimates a 3.18% chance of exploitation in the next 30 days, higher than 87.8% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 2Timeline
- 17-05-2012PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The udp6_ufo_fragment function in net/ipv6/udp.c in the Linux kernel before 2.6.39, when a certain UDP Fragmentation Offload (UFO) configuration is enabled, allows remote attackers to cause a denial of service (system crash) by sending fragmented IPv6 UDP packets to a bridge device.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
3.18%
Chance of exploitation in the next 30 days
Percentile
88%
Versus all other CVEs
30-day change
0.00 pp
From 3.18% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (bugzilla.redhat.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Ubuntu9 products
- linux< 3.11.0-12.19
- linux-flo< 3.4.0-1.3
- linux-goldfish< 3.4.0-1.9
- linux-grouper< 3.1.10-8.28
- linux-lts-utopic< 3.16.0-25.33~14.04.2
Avaya1 product
- 96x1_ip_deskphone_firmware≥ 6.0.0, ≤ 6.6.0
Linux1 product
- linux_kernel< 2.6.39
3 vendors · 11 products
References
23 links- github.com/torvalds/linux/commit/a9cf73ea7ff78f52662c8658d93c226effbbeddeX Refsource CONFIRMPatchThird Party Advisory
- bugzilla.redhat.com/show_bug.cgi?id=682066X Refsource CONFIRMExploitIssue TrackingThird Party Advisory
- git.kernel.orgX Refsource CONFIRM