CVE-2011-2189
HIGH 7.5EPSS 17.9%
net/core/net_namespace.c in the Linux kernel 2.6.32 and earlier does not properly handle a high rate of creation and cleanup of network namespaces, which makes it easier for remote attackers to cause a denial of service (memory consumption) via requests to a daemon that requires a separate namespace per connection, as demonstrated by vsftpd.
- CVSS v3.1 NVD
- 7.5 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS v2.0 NVD
- 7.8 HIGH
AV:N/AC:L/Au:N/C:N/I:N/A:C - EPSS
- 17.85% chance of exploitation in the next 30 days, 97th percentile
- Published
- 2011-10-10
- Updated
- 2024-08-06
Proof-of-concept exploits (2)
- https://bugzilla.redhat.com/show_bug.cgi?id=711134
- https://bugzilla.redhat.com/show_bug.cgi?id=711245
ExploitDB entries (1)
Security advisories
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629373
- http://patchwork.ozlabs.org/patch/88217
- http://www.debian.org/security/2011/dsa-2305
- http://www.openwall.com/lists/oss-security/2011/06/06/10
- http://www.openwall.com/lists/oss-security/2011/06/06/20
- http://www.ubuntu.com/usn/USN-1288-1
- https://bugs.launchpad.net/ubuntu/+source/linux/+bug/720095