vlan_dev.c in the VLAN code for Linux kernel 2.6.8 allows remote attackers to cause a denial of service (kernel oops from null dereference) via certain UDP packets that lead to a function call with the wrong argument, as demonstrated using snmpwalk on snmpd.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-2.6.8.1-5-power3Upgrade linux-image-2.6.8.1-5-amd64-xeonUpgrade linux-image-2.6.10-5-mckinley-smpUpgrade linux-image-2.6.10-5-686-smpUpgrade linux-image-2.6.10-5-powerpcUpgrade linux-image-2.6.8.1-5-power4-smpUpgrade linux-image-2.6.8.1-5-686-smpUpgrade linux-image-2.6.10-5-k7Upgrade linux-image-2.6.10-5-itanium-smpUpgrade linux-image-2.6.10-5-itaniumUpgrade linux-image-2.6.8.1-5-amd64-k8-smpUpgrade linux-patch-ubuntu-2.6.10Upgrade linux-image-2.6.10-5-k7-smpUpgrade linux-image-2.6.10-5-686Upgrade linux-image-2.6.8.1-5-powerpcUpgrade linux-image-2.6.8.1-5-amd64-genericUpgrade linux-image-2.6.10-5-amd64-k8Upgrade linux-image-2.6.8.1-5-k7-smp | Nov 8, 2024 | Aug 12, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub