CVE-2011-3588
The SSH configuration in the Red Hat mkdumprd script for kexec-tools, as distributed in the kexec...
The SSH configuration in the Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x before 2.0.0-209 packages in Red Hat Enterprise Linux, disables the StrictHostKeyChecking option, which allows man-in-the-middle attackers to spoof kdump servers, and obtain sensitive core information, by using an arbitrary SSH key.
Exploit likelihood
What each source reports
NVD Score used
The SSH configuration in the Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x before 2.0.0-209 packages in Red Hat Enterprise Linux, disables the StrictHostKeyChecking option, which allows man-in-the-middle attackers to spoof kdump servers, and obtain sensitive core information, by using an arbitrary SSH key.
- Record
CVE-2011-3588- CVSS 2.0
- 5.7 Medium
AV:A/AC:M/Au:N/C:C/I:N/A:N - Weakness
- CWE-310
- Updated
- 2026-11-02
CVE List No score
The SSH configuration in the Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x before 2.0.0-209 packages in Red Hat Enterprise Linux, disables the StrictHostKeyChecking option, which allows man-in-the-middle attackers to spoof kdump servers, and obtain sensitive core information, by using an arbitrary SSH key.
- Record
CVE-2011-3588- Updated
- 2026-11-02
EUVDEUVD-2011-3549 No score
The SSH configuration in the Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x before 2.0.0-209 packages in Red Hat Enterprise Linux, disables the StrictHostKeyChecking option, which allows man-in-the-middle attackers to spoof kdump servers, and obtain sensitive core information, by using an arbitrary SSH key.
- Record
EUVD-2011-3549- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-26mg-g7xm-c7ph No score
The SSH configuration in the Red Hat mkdumprd script for kexec-tools, as distributed in the kexec...
The SSH configuration in the Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x before 2.0.0-209 packages in Red Hat Enterprise Linux, disables the StrictHostKeyChecking option, which allows man-in-the-middle attackers to spoof kdump servers, and obtain sensitive core information, by using an arbitrary SSH key.
- Record
GHSA-26mg-g7xm-c7ph- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kexec-toolsRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:2.0.0-209.el6 | 0:2.0.0-209.el6 |
kexec-tools-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:2.0.0-209.el6 | 0:2.0.0-209.el6 |
kexec-toolsRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:2.0.0-209.el6 | 0:2.0.0-209.el6 |
kexec-tools-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:2.0.0-209.el6 | 0:2.0.0-209.el6 |
kexec-toolsRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:2.0.0-209.el6 | 0:2.0.0-209.el6 |
kexec-tools-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:2.0.0-209.el6 | 0:2.0.0-209.el6 |
kexec-toolsRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:2.0.0-209.el6 | 0:2.0.0-209.el6 |
kexec-tools-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:2.0.0-209.el6 | 0:2.0.0-209.el6 |
kexec-toolsRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:1.102pre-154.el5 | 0:1.102pre-154.el5 |
kexec-tools-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:1.102pre-154.el5 | 0:1.102pre-154.el5 |
kexec-toolsRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:1.102pre-154.el5 | 0:1.102pre-154.el5 |
kexec-tools-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:1.102pre-154.el5 | 0:1.102pre-154.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-3588 is a medium vulnerability (CVSS 5.7) in Redhat Kexec-tools, published February 15, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.55%, the 46th percentile. No source names a fixed version.
References
bugzilla.redhat.com/show_bug.cgi?id=716439
rhn.redhat.com/errata/RHSA-2011-1532.html
nvd.nist.gov/vuln/detail/CVE-2011-3588
github.com/advisories/GHSA-26mg-g7xm-c7ph
access.redhat.com/errata/RHSA-2011:1532
Show 26 moreShow less
docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.2_Technical_Notes/kexec-tools.html
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1532.json
cve.org/CVERecord?id=CVE-2011-3588