The udp6_ufo_fragment function in net/ipv6/udp.c in the Linux kernel before 2.6.39, when a certain UDP Fragmentation Offload (UFO) configuration is enabled, allows remote attackers to cause a denial of service (system crash) by sending fragmented IPv6 UDP packets to a bridge device.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | May 17, 2012 |
| Suse | — | Upgrade kernel-rt_trace-develUpgrade brocade-bna-kmp-rtUpgrade kernel-rt_traceUpgrade cluster-network-kmp-rtUpgrade kernel-rt_trace-baseUpgrade ofed-kmp-rtUpgrade ocfs2-kmp-rt_traceUpgrade kernel-rt-baseUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-source-rtUpgrade drbd-kmp-rtUpgrade drbd-kmp-rt_traceUpgrade kernel-syms-rtUpgrade cluster-network-kmp-rt_traceUpgrade ocfs2-kmp-rtUpgrade iscsitarget-kmp-rtUpgrade kernel-rt-develUpgrade kernel-rt | Feb 17, 2015 | May 17, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.32-37-preemptUpgrade linux-image-2.6.38-11-virtualUpgrade linux-image-2.6.32-37-sparc64-smpUpgrade linux-image-2.6.32-37-sparc64Upgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.38-11-versatileUpgrade linux-image-2.6.32-37-powerpcUpgrade linux-image-2.6.32-37-generic-paeUpgrade linux-image-2.6.35-31-serverUpgrade linux-image-2.6.38-11-omapUpgrade linux-image-2.6.38-11-generic-paeUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.35-31-powerpcUpgrade linux-image-2.6.32-37-serverUpgrade linux-image-2.6.35-31-generic-paeUpgrade linux-image-2.6.32-341-ec2Upgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.38-11-powerpc-smpUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-3.0.0-13-generic-paeUpgrade linux-image-2.6.32-37-versatileUpgrade linux-image-2.6.32-37-powerpc-smpUpgrade linux-image-2.6.35-31-virtualUpgrade linux-image-2.6.38-11-serverUpgrade linux-image-2.6.35-31-versatileUpgrade linux-image-2.6.35-31-genericUpgrade linux-image-2.6.32-37-virtualUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.35-31-powerpc64-smpUpgrade linux-image-2.6.32-37-powerpc64-smpUpgrade linux-image-2.6.32-37-lpiaUpgrade linux-image-2.6.38-11-genericUpgrade linux-image-3.0.0-13-serverUpgrade linux-image-2.6.32-37-ia64Upgrade linux-image-2.6.32-37-386Upgrade linux-image-2.6.35-31-powerpc-smpUpgrade linux-image-2.6.38-11-powerpcUpgrade linux-image-3.0.0-13-virtualUpgrade linux-image-2.6.38-11-powerpc64-smpUpgrade linux-image-2.6.35-31-omapUpgrade linux-image-3.0.0-13-genericUpgrade linux-image-2.6.32-421-doveUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.32-37-generic | Nov 8, 2024 | May 17, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub