PT-2010-2484 · Linux+1 · Linux Kernel+1
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 2.6.26
Description
The issue allows remote attackers to cause a denial of service, resulting in a guest OS crash and an associated qemu-kvm process exit. This is achieved by sending a large amount of network traffic to a TCP port on the guest OS. The problem is related to an improper implementation of TCP Segment Offloading (TSO) in the virtio-net whitelist.
Recommendations
For Linux kernel versions prior to 2.6.26, update to version 2.6.26 or later to resolve the issue.
Correção
DoS
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Linux Kernel
Red Hat