PT-2010-2201 · Linux+1 · Linux Kernel+1

Eugene Teo · CVE-2010-0437 · Publicado 2010-03-17 · Atualizado 2023-02-13

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.27

Description The issue is related to the ip6 dst lookup tail function in the Linux kernel, which does not properly handle certain circumstances involving an IPv6 TUN network interface and a large number of neighbors. This can allow attackers to cause a denial of service, resulting in a NULL pointer dereference and OOPS, or possibly have other unspecified impacts.

Recommendations For Linux kernel versions prior to 2.6.27, update to version 2.6.27 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2010-0437

RHSA-2010:0147

RHSA-2010:0148

RHSA-2010:0149

RHSA-2010:0161

RHSA-2010_0147

Produtos afetados

Linux Kernel

Red Hat

Referências · 24

• 🔥 http://bugzilla.kernel.org/show_bug.cgi?id=11469 · Exploit
• 🔥 https://exploit-db.com/exploits/33635 · Exploit
• http://secunia.com/advisories/39033 · Nota
• https://bdu.fstec.ru/vul/2015-05251 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2010-0008 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-0437 · Nota de Segurança
• http://openwall.com/lists/oss-security/2010/03/04/4 · Nota
• http://redhat.com/support/errata/RHSA-2010-0147.html · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10061 · Nota
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e550dfb0c2c31b6363aa463a035fc9f8dcaa3c9b · Nota
• https://access.redhat.com/security/cve/CVE-2010-0437 · Nota
• https://access.redhat.com/security/cve/CVE-2010-0007 · Nota
• http://secunia.com/advisories/43315 · Nota
• http://redhat.com/support/errata/RHSA-2010-0161.html · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2009-4308 · Nota