imPC@ndo IT

Tracker / CVE-2011-3188

CVE-2011-3188

Critical 9.1

The (1) IPv4 and (2) IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes it easier for remote attackers to cause a denial of service (disrupted networking) or hijack network sessions by predicting these values and sending crafted packets.

Affected products and versions

f5 arx · 6.0.0 → 6.4.0
f5 big-ip_access_policy_manager · 10.1.0 → 10.2.4
f5 big-ip_access_policy_manager · 11.0.0 → 11.1.0
f5 big-ip_analytics · 11.0.0 → 11.1.0
f5 big-ip_application_security_manager · 10.0.0 → 10.2.4
f5 big-ip_application_security_manager · 11.0.0 → 11.1.0
f5 big-ip_edge_gateway · 10.1.0 → 10.2.4
f5 big-ip_edge_gateway · 11.0.0 → 11.1.0
f5 big-ip_global_traffic_manager · 10.0.0 → 10.2.4
f5 big-ip_global_traffic_manager · 11.0.0 → 11.1.0
f5 big-ip_link_controller · 10.0.0 → 10.2.4
f5 big-ip_link_controller · 11.0.0 → 11.1.0
f5 big-ip_local_traffic_manager · 10.0.0 → 10.2.4
f5 big-ip_local_traffic_manager · 11.0.0 → 11.1.0
f5 big-ip_protocol_security_module · 10.0.0 → 10.2.4
f5 big-ip_protocol_security_module · 11.0.0 → 11.1.0
f5 big-ip_wan_optimization_manager · 10.0.0 → 10.2.4
f5 big-ip_wan_optimization_manager · 11.0.0 → 11.1.0
f5 big-ip_webaccelerator · 10.0.0 → 10.2.4
f5 big-ip_webaccelerator · 11.0.0 → 11.1.0
f5 enterprise_manager
f5 enterprise_manager · 2.1.0 → 2.3.0
f5 firepass
f5 firepass · 6.0.0 → 6.1.0
linux linux_kernel · … → 3.1
redhat enterprise_linux

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References