CVE-2011-3188 The (1) IPv4 and (2) IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes it easier for remote....
CriticalCVSS 9.1
EPSS 5.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The (1) IPv4 and (2) IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes it easier for remote attackers to cause a denial of service (disrupted networking) or hijack network sessions by predicting these values and sending crafted packets.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux kernel | < 3.1 | 3.1 |
| redhat enterprise linux | = 4.0 | No fix listed |
| f5 arx | >= 6.0.0, <= 6.4.0 | No fix listed |
| f5 big-ip access policy manager | >= 10.1.0, <= 10.2.4 | No fix listed |
| f5 big-ip access policy manager | >= 11.0.0, <= 11.1.0 | No fix listed |
| f5 big-ip analytics | >= 11.0.0, <= 11.1.0 | No fix listed |
| f5 big-ip application security manager | >= 10.0.0, <= 10.2.4 | No fix listed |
| f5 big-ip application security manager | >= 11.0.0, <= 11.1.0 | No fix listed |
| f5 big-ip edge gateway | >= 10.1.0, <= 10.2.4 | No fix listed |
| f5 big-ip edge gateway | >= 11.0.0, <= 11.1.0 | No fix listed |
| f5 big-ip global traffic manager | >= 10.0.0, <= 10.2.4 | No fix listed |
| f5 big-ip global traffic manager | >= 11.0.0, <= 11.1.0 | No fix listed |
| f5 big-ip link controller | >= 10.0.0, <= 10.2.4 | No fix listed |
| f5 big-ip link controller | >= 11.0.0, <= 11.1.0 | No fix listed |
| f5 big-ip local traffic manager | >= 10.0.0, <= 10.2.4 | No fix listed |
| f5 big-ip local traffic manager | >= 11.0.0, <= 11.1.0 | No fix listed |
| f5 big-ip protocol security module | >= 10.0.0, <= 10.2.4 | No fix listed |
| f5 big-ip protocol security module | >= 11.0.0, <= 11.1.0 | No fix listed |
| f5 big-ip wan optimization manager | >= 10.0.0, <= 10.2.4 | No fix listed |
| f5 big-ip wan optimization manager | >= 11.0.0, <= 11.1.0 | No fix listed |
| f5 big-ip webaccelerator | >= 10.0.0, <= 10.2.4 | No fix listed |
| f5 big-ip webaccelerator | >= 11.0.0, <= 11.1.0 | No fix listed |
| f5 enterprise manager | >= 2.1.0, <= 2.3.0 | No fix listed |
| f5 enterprise manager | = 3.0.0 | No fix listed |
| f5 firepass | >= 6.0.0, <= 6.1.0 | No fix listed |
Show 1 more
| Product | Affected versions | Fixed in |
|---|---|---|
| f5 firepass | = 7.0.0 | No fix listed |
References
- git.kernel.org
- git.kernel.org
- HPSBGN02970 mailing-list third-party-advisory vendor-advisory
- www.kernel.org mailing-list patch vendor-advisory
- [oss-security] 20110823 Re: CVE request: kernel: change in how tcp seq numbers are generated mailing-list patch third-party-advisory
- bugzilla.redhat.com issue-tracking patch third-party-advisory
- github.com patch third-party-advisory
- github.com patch third-party-advisory
- support.f5.com