CVE-2011-3347: Medium severity red hat enterprise linux vulnerability
A certain Red Hat patch to the be2net implementation in the kernel package before 2.6.32-218.el6 on Red Hat Enterprise Linux (RHEL) 6, when promiscuous mode is enabled, allows remote attackers to cause a denial of service (system crash) via non-member VLAN packets.
Other sources
When interface is put in promiscuous mode and it receives VLAN packets, but no VLANS are configured on that interface , then the kernel crashes in the 8021q module.
Acknowledgements:
Red Hat would like to thank Somnath Kotur for reporting this issue.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-3347?
CVE-2011-3347 is classified as a high severity vulnerability due to its potential to cause a denial of service.
How do I fix CVE-2011-3347?
To fix CVE-2011-3347, upgrade your kernel package to a version that addresses this vulnerability since the patch was implemented in kernel versions after 2.6.32-218.el6.
What does CVE-2011-3347 affect?
CVE-2011-3347 affects Red Hat Enterprise Linux 6 operating system, specifically when the be2net implementation is used with promiscuous mode enabled.
Can CVE-2011-3347 be exploited remotely?
Yes, CVE-2011-3347 can be exploited remotely by attackers sending non-member VLAN packets in certain conditions.
What are the symptoms of CVE-2011-3347 exploitation?
Exploitation of CVE-2011-3347 may lead to a system crash, resulting in a denial of service for users.