CVE-2011-3188 Other in n/a
Remote attackers can disrupt networking or hijack sessions by predicting weak IPv4/IPv6 sequence numbers generated by the Linux kernel.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2011-3188?
CVE-2011-3188 is a critical vulnerability in F5 Big-Ip Access Policy Manager, published on 24 May 2012. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The (1) IPv4 and (2) IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes it easier for remote attackers to cause a denial of service (disrupted networking) or hijack network sessions by predicting these values and sending crafted packets.
Which versions are affected by CVE-2011-3188?
It affects 15 products.
Products include F5 Arx, F5 Big-Ip Access Policy Manager, F5 Big-Ip Analytics, F5 Big-Ip Application Security Manager, F5 Big-Ip Edge Gateway, F5 Big-Ip Global Traffic Manager and 9 more.
How do I fix CVE-2011-3188?
Upgrade to a fixed version.
Is CVE-2011-3188 being exploited?
There is no known exploitation of CVE-2011-3188 in the wild and no public exploit code.
Other vulnerabilities in F5 Big-Ip Access Policy Manager
Sources
Also known as GHSA-93rr-wh56-p8fw.