CVE-2011-2723 Denial of service in n/a

Medium 5.7 Published 6 Sep 2011 Updated 6 Aug 2024

Remote attackers can cause a system crash via crafted network traffic when Generic Receive Offload is enabled in the Linux kernel.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2011-2723?

CVE-2011-2723 is a medium-severity denial of service vulnerability in Linux kernel, published on 6 Sep 2011. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The skb_gro_header_slow function in include/linux/netdevice.h in the Linux kernel before 2.6.39.4, when Generic Receive Offload (GRO) is enabled, resets certain fields in incorrect situations, which allows remote attackers to cause a denial of service (system crash) via crafted network traffic.

Weakness: CWE-20

Which versions are affected by CVE-2011-2723?

It affects 1 product.

Linux distribution packages (18)

`kernel` Red Hat:enterprise_linux:5::server	All versions	`0:2.6.18-238.27.1.el5`
`kernel-PAE` Red Hat:enterprise_linux:5::server	All versions	`0:2.6.18-238.27.1.el5`
`kernel-PAE-debuginfo` Red Hat:enterprise_linux:5::server	All versions	`0:2.6.18-238.27.1.el5`
`kernel-PAE-devel` Red Hat:enterprise_linux:5::server	All versions	`0:2.6.18-238.27.1.el5`
`kernel-debug` Red Hat:enterprise_linux:5::server	All versions	`0:2.6.18-238.27.1.el5`
`kernel-debug-debuginfo` Red Hat:enterprise_linux:5::server	All versions	`0:2.6.18-238.27.1.el5`
`kernel-debug-devel` Red Hat:enterprise_linux:5::server	All versions	`0:2.6.18-238.27.1.el5`
`kernel-debuginfo` Red Hat:enterprise_linux:5::server	All versions	`0:2.6.18-238.27.1.el5`
`kernel-debuginfo-common` Red Hat:enterprise_linux:5::server	All versions	`0:2.6.18-238.27.1.el5`
`kernel-devel` Red Hat:enterprise_linux:5::server	All versions	`0:2.6.18-238.27.1.el5`
`kernel-doc` Red Hat:enterprise_linux:5::server	All versions	`0:2.6.18-238.27.1.el5`
`kernel-headers` Red Hat:enterprise_linux:5::server	All versions	`0:2.6.18-238.27.1.el5`
`kernel-kdump` Red Hat:enterprise_linux:5::server	All versions	`0:2.6.18-238.27.1.el5`
`kernel-kdump-debuginfo` Red Hat:enterprise_linux:5::server	All versions	`0:2.6.18-238.27.1.el5`
`kernel-kdump-devel` Red Hat:enterprise_linux:5::server	All versions	`0:2.6.18-238.27.1.el5`
`kernel-xen` Red Hat:enterprise_linux:5::server	All versions	`0:2.6.18-238.27.1.el5`
`kernel-xen-debuginfo` Red Hat:enterprise_linux:5::server	All versions	`0:2.6.18-238.27.1.el5`
`kernel-xen-devel` Red Hat:enterprise_linux:5::server	All versions	`0:2.6.18-238.27.1.el5`

Products include Linux kernel.

How do I fix CVE-2011-2723?

Upgrade to a fixed version.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2011-2723 being exploited?

There is no known exploitation of CVE-2011-2723 in the wild and no public exploit code.

All Linux kernel vulnerabilities

Sources

Also known as GHSA-gj23-gxgc-vvhj, RHSA-2011:1321.