Vulnerability Details : CVE-2011-3347
A certain Red Hat patch to the be2net implementation in the kernel package before 2.6.32-218.el6 on Red Hat Enterprise Linux (RHEL) 6, when promiscuous mode is enabled, allows remote attackers to cause a denial of service (system crash) via non-member VLAN packets.
Vulnerability category: Denial of service
Exploit prediction scoring system (EPSS) score for CVE-2011-3347
Probability of exploitation activity in the next 30 days: 0.26%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 63 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2011-3347
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
4.6
|
MEDIUM | AV:A/AC:H/Au:N/C:N/I:N/A:C |
3.2
|
6.9
|
NIST |
References for CVE-2011-3347
-
https://bugzilla.redhat.com/show_bug.cgi?id=736425
736425 – (CVE-2011-3347) CVE-2011-3347 kernel: be2net: promiscuous mode and non-member VLAN packets DoS
-
https://oss.oracle.com/git/?p=redpatch.git%3Ba=commit%3Bh=fadca7bdc43b02f518585d9547019966415cadfd
oss.oracle.com
Products affected by CVE-2011-3347
- cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*