CVE-2011-0350
published 2011-01-28CVE-2011-0350: Unspecified vulnerability in Cisco IOS 12.4(24)MD before 12.4(24)MD2 on the Cisco Content Services Gateway Second Generation (aka CSG2) allows remote attackers…
PriorityP337high7.8CVSS 2.0
AVNACLAuNCNINAC
EPSS
4.09%
89.7th percentile
Unspecified vulnerability in Cisco IOS 12.4(24)MD before 12.4(24)MD2 on the Cisco Content Services Gateway Second Generation (aka CSG2) allows remote attackers to cause a denial of service (device hang or reload) via crafted TCP packets, aka Bug ID CSCth41891, a different vulnerability than CVE-2011-0349.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | content_services_gateway | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
CVSS provenance
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco7.8HIGH
vendor_redhat6.9MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: kvm: pit timer with no irqchip crashes the system
vendor_redhat·2011-12-14·CVSS 4.9
CVE-2011-4622 [MEDIUM] kernel: kvm: pit timer with no irqchip crashes the system
kernel: kvm: pit timer with no irqchip crashes the system
The create_pit_timer function in arch/x86/kvm/i8254.c in KVM 83, and possibly other versions, does not properly handle when Programmable Interval Timer (PIT) interrupt requests (IRQs) when a virtual interrupt controller (irqchip) is not available, which allows local users to cause a denial of service (NULL pointer dereference) by starting a timer.
Statement: This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 4 and Red Hat Enterprise MRG as they did not provide support for the KVM subsystem. It has been addressed in Red Hat Enterprise 5 and 6 via https://rhn.redhat.com/errata/RHSA-2012-0051.html and https://rhn.redhat.com/errata/RHSA-2012-0350.html.
Package: kernel (Red Hat Enterprise L
Red Hat
kernel: kvm: device assignment DoS
vendor_redhat·2011-11-20·CVSS 4.0
CVE-2011-4347 [MEDIUM] kernel: kvm: device assignment DoS
kernel: kvm: device assignment DoS
The kvm_vm_ioctl_assign_device function in virt/kvm/assigned-dev.c in the KVM subsystem in the Linux kernel before 3.1.10 does not verify permission to access PCI configuration space and BAR resources, which allows host OS users to assign PCI devices and cause a denial of service (host OS crash) via a KVM_ASSIGN_PCI_DEVICE operation.
Statement: This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 4 and Red Hat Enterprise MRG as they did not provide support for the KVM subsystem. This has been addressed in Red Hat Enterprise Linux 6 via https://rhn.redhat.com/errata/RHSA-2012-0350.html. A future kvm update in Red Hat Enterprise 5 may address this flaw.
Package: kernel (Red Hat Enterprise Linux 4) - Not affected
Red Hat
kernel: jbd/jbd2: invalid value of first log block leads to oops
vendor_redhat·2011-11-01·CVSS 2.1
CVE-2011-4132 [LOW] kernel: jbd/jbd2: invalid value of first log block leads to oops
kernel: jbd/jbd2: invalid value of first log block leads to oops
The cleanup_journal_tail function in the Journaling Block Device (JBD) functionality in the Linux kernel 2.6 allows local users to cause a denial of service (assertion error and kernel oops) via an ext3 or ext4 image with an "invalid log first block value."
Statement: This issue affects the Linux kernel as shipped with Red Hat Enterprise Linux 4,
5, 6, and Red Hat Enterprise MRG. This has been addressed in Red Hat Enterprise Linux 5, 6, and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2012-0007.html, https://rhn.redhat.com/errata/RHSA-2012-0350.html, and https://rhn.redhat.com/errata/RHSA-2012-0010.html. Red Hat
Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle,
https://access.redhat.c
Red Hat
kernel: crypto: ghash: null pointer deref if no key is set
vendor_redhat·2011-10-20·CVSS 5.5
CVE-2011-4081 [MEDIUM] CWE-476 kernel: crypto: ghash: null pointer deref if no key is set
kernel: crypto: ghash: null pointer deref if no key is set
crypto/ghash-generic.c in the Linux kernel before 3.1 allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact by triggering a failed or missing ghash_setkey function call, followed by a (1) ghash_update function call or (2) ghash_final function call, as demonstrated by a write operation on an AF_ALG socket.
Statement: This issue did not affect the Linux kernels as shipped with Red Hat Enterprise Linux 4, and 5 as they did not include support for the GHASH message digest algorithm. This has been addressed in Red Hat Enterprise Linux 6, and MRG via https://rhn.redhat.com/errata/RHSA-2012-0350.html, and https://rhn.redhat.com/errata/RHSA-2012-0010.html.
Red Hat
kernel: send(m)msg: user pointer dereferences
vendor_redhat·2011-08-25·CVSS 5.5
CVE-2011-4594 [MEDIUM] kernel: send(m)msg: user pointer dereferences
kernel: send(m)msg: user pointer dereferences
The __sys_sendmsg function in net/socket.c in the Linux kernel before 3.1 allows local users to cause a denial of service (system crash) via crafted use of the sendmmsg system call, leading to an incorrect pointer dereference.
Statement: This issue did not affect the versions of Linux kernel as shipped with Red Hat
Enterprise Linux 4, 5 and Red Hat Enterprise MRG as they did not provide support for the sendmmsg syscall. This has been addressed in Red Hat Enterprise Linux 6 via https://rhn.redhat.com/errata/RHSA-2012-0350.html.
Package: kernel (Red Hat Enterprise Linux 4) - Not affected
Package: kernel (Red Hat Enterprise Linux 5) - Not affected
Red Hat
kernel: xfs: potential buffer overflow in xfs_readlink()
vendor_redhat·2011-04-08·CVSS 6.9
CVE-2011-4077 [MEDIUM] kernel: xfs: potential buffer overflow in xfs_readlink()
kernel: xfs: potential buffer overflow in xfs_readlink()
Buffer overflow in the xfs_readlink function in fs/xfs/xfs_vnodeops.c in XFS in the Linux kernel 2.6, when CONFIG_XFS_DEBUG is disabled, allows local users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via an XFS image containing a symbolic link with a long pathname.
Statement: This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 4 as it did not include support for XFS filesystem. This has been addressed in Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2012-0007.html, https://rhn.redhat.com/errata/RHSA-2012-0350.html, and https://rhn.redhat.com/errata/RHSA-2012-0333.html.
Package: kernel (Re
Red Hat
kernel: perf, powerpc: Handle events that raise an exception without overflowing
vendor_redhat·2011-03-16·CVSS 4.9
CVE-2011-4611 [MEDIUM] kernel: perf, powerpc: Handle events that raise an exception without overflowing
kernel: perf, powerpc: Handle events that raise an exception without overflowing
Integer overflow in the perf_event_interrupt function in arch/powerpc/kernel/perf_event.c in the Linux kernel before 2.6.39 on powerpc platforms allows local users to cause a denial of service (unhandled performance monitor exception) via vectors that trigger certain outcomes of performance events.
Statement: This issue did not affect the Linux kernels as shipped with Red Hat Enterprise Linux 4 and 5 as they did not have support for Performance event. It did not affect Red Hat Enterprise MRG as it did not provide support for PowerPC. This has been addressed in Red Hat Enterprise Linux 6 via https://rhn.redhat.com/errata/RHSA-2012-0350.html.
Package: kernel (Red Hat Enterprise Linux 4) - Not affected
Packag
Cisco
Cisco Content Services Gateway Vulnerabilities
vendor_cisco·2011-01-26·CVSS 7.8
CVE-2011-0348 [HIGH] CWE-399 Cisco Content Services Gateway Vulnerabilities
Cisco Content Services Gateway Vulnerabilities
A service policy bypass vulnerability exists in the Cisco Content
Services Gateway - Second Generation (CSG2), which runs on the Cisco Service
and Application Module for IP (SAMI). Under certain configurations this
vulnerability could allow:
Customers to access sites that would normally match a billing policy
to be accessed without being charged to the end customer
Customers to access sites that would normally be denied based on
configured restriction policies
Additionally, Cisco IOS Software Release 12.4(24)MD1 on the Cisco CSG2
contains two vulnerabilities that can be exploited by a remote, unauthenticated
attacker to create a denial of service condition that prevents traffic from
passing through the CSG2. These vulnerabilities require on
Cisco
Cisco Content Services Gateway Vulnerabilities
vendor_cisco
CVE-2011-0350 Cisco Content Services Gateway Vulnerabilities
CVE-2011-0350: Cisco Content Services Gateway Vulnerabilities
A service policy bypass vulnerability exists in the Cisco Content Services Gateway - Second Generation (CSG2), which runs on the Cisco Service and Application Module for IP (SAMI). Under certain configurations this vulnerability could allow: Customers to access sites that would normally match a billing policy to be accessed without being charged to the end customer Customers to access sites that would normally be denied based on configured restriction policies Additionally, Cisco IOS Software Release 12.4(24)MD1 on the Cisco CSG2 contains two vulnerabilities that can be exploited by a remote, unauthenticated attacker to create a denial of service condition that prevents traffic from passing through the CSG2. These vulnerabilitie
GHSA
GHSA-76ph-hphh-2jgj: Unspecified vulnerability in Cisco IOS 12
ghsa_unreviewed·2022-05-17·CVSS 7.8
CVE-2011-0349 [HIGH] GHSA-76ph-hphh-2jgj: Unspecified vulnerability in Cisco IOS 12
Unspecified vulnerability in Cisco IOS 12.4(24)MD before 12.4(24)MD2 on the Cisco Content Services Gateway Second Generation (aka CSG2) allows remote attackers to cause a denial of service (device hang or reload) via crafted TCP packets, aka Bug ID CSCth17178, a different vulnerability than CVE-2011-0350.
GHSA
GHSA-3h7j-mv2q-qm4h: Unspecified vulnerability in Cisco IOS 12
ghsa_unreviewed·2022-05-17·CVSS 7.8
CVE-2011-0350 [HIGH] GHSA-3h7j-mv2q-qm4h: Unspecified vulnerability in Cisco IOS 12
Unspecified vulnerability in Cisco IOS 12.4(24)MD before 12.4(24)MD2 on the Cisco Content Services Gateway Second Generation (aka CSG2) allows remote attackers to cause a denial of service (device hang or reload) via crafted TCP packets, aka Bug ID CSCth41891, a different vulnerability than CVE-2011-0349.
No detection rules found.
No public exploits indexed.
http://osvdb.org/70722http://secunia.com/advisories/43052http://securitytracker.com/id?1024992http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6791d.shtmlhttp://www.securityfocus.com/bid/46028http://www.vupen.com/english/advisories/2011/0229https://exchange.xforce.ibmcloud.com/vulnerabilities/64938http://osvdb.org/70722http://secunia.com/advisories/43052http://securitytracker.com/id?1024992http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6791d.shtmlhttp://www.securityfocus.com/bid/46028http://www.vupen.com/english/advisories/2011/0229https://exchange.xforce.ibmcloud.com/vulnerabilities/64938
2011-01-28
Published