imPC@ndo IT

Tracker / CVE-2011-4326

CVE-2011-4326

High 7.1

The udp6_ufo_fragment function in net/ipv6/udp.c in the Linux kernel before 2.6.39, when a certain UDP Fragmentation Offload (UFO) configuration is enabled, allows remote attackers to cause a denial of service (system crash) by sending fragmented IPv6 UDP packets to a bridge device.

Affected products and versions

avaya 96x1_ip_deskphone_firmware · 6.0.0 → 6.6.0
linux linux_kernel · … → 2.6.39

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References