CVE-2011-3347 — kernel: be2net: promiscuous mode and non-member VLAN packets DoS

Back Back to CVE browser

MEDIUM

kernel: be2net: promiscuous mode and non-member VLAN packets DoS

Published Jun 8, 2013

4.6

MEDIUM

CVSS 2.0

EPSS 0.76%

Description

A certain Red Hat patch to the be2net implementation in the kernel package before 2.6.32-218.el6 on Red Hat Enterprise Linux (RHEL) 6, when promiscuous mode is enabled, allows remote attackers to cause a denial of service (system crash) via non-member VLAN packets.

Affected products

Red Hat Enterprise Linux 5

kernel-0:2.6.18-274.7.1.el5

Fixed · RHSA-2011:1386
Red Hat Enterprise Linux 6

kernel-0:2.6.32-220.el6

Fixed · RHSA-2011:1530
Red Hat Enterprise Linux 6.1 EUS - Server Only

kernel-0:2.6.32-131.25.1.el6

Fixed · RHSA-2012:0116
Red Hat Enterprise Linux 4

kernel

Not affected
Red Hat Enterprise MRG 2

realtime-kernel

Affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 5	kernel-0:2.6.18-274.7.1.el5	Fixed	RHSA-2011:1386
Red Hat Enterprise Linux 6	kernel-0:2.6.32-220.el6	Fixed	RHSA-2011:1530
Red Hat Enterprise Linux 6.1 EUS - Server Only	kernel-0:2.6.32-131.25.1.el6	Fixed	RHSA-2012:0116
Red Hat Enterprise Linux 4	kernel	Not affected	n/a
Red Hat Enterprise MRG 2	realtime-kernel	Affected	n/a

Remediation

Red Hat statement

This has been addressed in Red Hat Enterprise Linux 5 via https://rhn.redhat.com/errata/RHSA-2011-1386.html. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 4 as it did not include support for ServerEngines' 10Gbps network adapter - BladeEngine. This has been addressed in Red Hat Enterprise Linux 6 via https://rhn.redhat.com/errata/RHSA-2011-1530.html. A future kernel update in Red Hat Enterprise MRG may address this issue.

Metrics

0.76% 0.00756

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00756

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (13 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.76% (0.00756)	53.49th	v5 (v2026.06.15)
Jun 15, 2026	0.82% (0.00816)	52.15th	v5 (v2026.06.15)
Mar 17, 2025	0.54% (0.00537)	65.53th	v4 (v2025.03.14)
Dec 12, 2024	0.21% (0.00207)	59.64th	v3 (v2023.03.01)
Apr 28, 2024	0.21% (0.00207)	58.31th	v3 (v2023.03.01)
Feb 8, 2024	0.26% (0.00262)	64.92th	v3 (v2023.03.01)
Mar 7, 2023	0.26% (0.00262)	62.07th	v3 (v2023.03.01)
Mar 6, 2023	1.05% (0.01055)	52.13th	v2 (v2022.01.01)
Feb 13, 2023	1.05% (0.01055)	51.58th	v2 (v2022.01.01)
Feb 3, 2023	1.32% (0.01319)	70.54th	v2 (v2022.01.01)
Sep 17, 2022	1.05% (0.01055)	50.47th	v2 (v2022.01.01)
Apr 1, 2022	1.05% (0.01055)	48.43th	v2 (v2022.01.01)
Feb 4, 2022	1.05% (0.01055)	27.52th	v2 (v2022.01.01)

Weaknesses (0)

No CWE recorded.

References (5)

https://access.redhat.com/security/cve/CVE-2011-3347
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=736425
x_refsource_CONFIRMIssue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2011-3347
https://oss.oracle.com/git/?p=redpatch.git%3Ba=commit%3Bh=fadca7bdc43b02f518585d9547019966415cadfd
x_refsource_CONFIRM
https://www.cve.org/CVERecord?id=CVE-2011-3347

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2011-3347		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=736425		x_refsource_CONFIRMIssue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2011-3347
https://oss.oracle.com/git/?p=redpatch.git%3Ba=commit%3Bh=fadca7bdc43b02f518585d9547019966415cadfd		x_refsource_CONFIRM
https://www.cve.org/CVERecord?id=CVE-2011-3347