int(6240)

Vulnerability Bulletins


Vulnerabilidad de denegación de servicio remota en la gestión de paquetes VLAN en el kernel de Red Hat Linux

Vulnerability classification

Property Value
Confidence level Oficial
Impact Denegación de Servicio
Dificulty Experto
Required attacker level Acceso remoto con cuenta

System information

Property Value
Affected manufacturer GNU/Linux
Affected software Ubuntu Ubuntu Linux 11.10 i386
Ubuntu Ubuntu Linux 11.10 amd64
Ubuntu Ubuntu Linux 10.04 sparc
Ubuntu Ubuntu Linux 10.04 powerpc
Ubuntu Ubuntu Linux 10.04 i386
Ubuntu Ubuntu Linux 10.04 ARM
Ubuntu Ubuntu Linux 10.04 amd64
Red Hat Fedora 15
Red Hat Enterprise Virtualization Hypervisor for RHEL 5 0
Red Hat Enterprise Linux Workstation Optional 6
Red Hat Enterprise Linux Workstation 6
Red Hat Enterprise Linux Server Optional 6
Red Hat Enterprise Linux Server EUS 6.1.z
Red Hat Enterprise Linux Server 6
Red Hat Enterprise Linux HPC Node Optional 6
Red Hat Enterprise Linux HPC Node 6
Red Hat Enterprise Linux Desktop Optional 6
Red Hat Enterprise Linux Desktop 6
Red Hat Enterprise Linux Desktop 5 client
Red Hat Enterprise Linux 5 Server
Oracle Enterprise Linux 6.2
Oracle Enterprise Linux 6
Oracle Enterprise Linux 5
OpenVZ Project OpenVZ 2.6.32-feoktistov.1
OpenVZ Project OpenVZ 2.6.32
OpenVZ Project OpenVZ 042stab044.17
OpenVZ Project OpenVZ 042stab039.10
OpenVZ Project OpenVZ 042stab037.1
OpenVZ Project OpenVZ 028stab092.2
OpenVZ Project OpenVZ 028stab091.1
OpenVZ Project OpenVZ 028stab089.1
OpenVZ Project OpenVZ 028stab085.2
OpenVZ Project OpenVZ 028stab081.1
OpenVZ Project OpenVZ 023stab054.1
OpenVZ Project OpenVZ 023stab053.2
Avaya Aura Experience Portal 6.0

Description

En el gestor de paquetes de VLAN (Non-member VLAN), en la gestión de las interficies en modo promiscuo, y mediante la utilización de el driver be2net, podría permitir a un usuario conectado en la red local, causar denegación de servicio.

Solution

Aplicar las actualizaciones disponibles

Standar resources

Property Value
CVE CVE-2011-3347
BID 50312

Other resources

Red Hat Enterprise Linux 6 kernel security, bug fix and enhancement update RHSA-2011-1530
http://downloads.avaya.com/css/P8/documents/100154664

Important: kernel security, bug fix, and enhancement update
https://rhn.redhat.com/errata/RHSA-2011-1386.html

Version history

Version Comments Date
1.0 Aviso emitido 2012-04-09