net/dns_resolver/dns_key.c in the Linux kernel before 2.6.38 allows remote DNS servers to cause a denial of service (NULL pointer dereference and OOPS) by not providing a valid response to a DNS query, as demonstrated by an erroneous grand.centrall.org query, which triggers improper handling of error data within a DNS resolver key.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-debug-baseUpgrade kernel-sourceUpgrade kernel-ec2-baseUpgrade kernel-source-vanillaUpgrade kernel-desktop-develUpgrade preload-kmp-defaultUpgrade kernel-vanilla-baseUpgrade kernel-ec2-extraUpgrade kernel-ec2-develUpgrade kernel-vmi-develUpgrade preload-kmp-desktopUpgrade kernel-vmi-baseUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-desktop-baseUpgrade kernel-vanillaUpgrade kernel-vanilla-develUpgrade kernel-debug-develUpgrade kernel-xen-develUpgrade kernel-ec2Upgrade kernel-pae-baseUpgrade kernel-develUpgrade kernel-traceUpgrade kernel-trace-baseUpgrade kernel-xenUpgrade kernel-pae-develUpgrade kernel-paeUpgrade kernel-trace-develUpgrade kernel-default-baseUpgrade kernel-symsUpgrade kernel-xen-baseUpgrade kernel-vmiUpgrade kernel-default-develUpgrade kernel-desktopUpgrade kernel-debug | Dec 12, 2013 | Oct 4, 2011 |
| Ubuntu | — | Upgrade linuxUpgrade linux-ti-omap4 | Nov 19, 2024 | Oct 5, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub