PT-2011-1490 · Linux+1 · Linux Kernel+1

Kosuke Tatsukawa · Publicado 2011-01-11 · Atualizado 2023-02-13 · CVE-2010-4263

Positive Technologies (AI Summary)

CVSS v2.0

7.9

Alta

Vetor base

AV:A/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.34

Description The issue is related to the igb receive skb function in the Intel Gigabit Ethernet subsystem. When Single Root I/O Virtualization (SR-IOV) and promiscuous mode are enabled but no VLANs are registered, remote attackers can cause a denial of service (NULL pointer dereference and panic) and possibly have other unspecified impacts via a VLAN tagged frame.

Recommendations For Linux kernel versions prior to 2.6.34, update to version 2.6.34 or later to resolve the issue.

Exploit

Correção

DoS

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

CVE-2010-4263

RHSA-2011:0007

RHSA-2011:0017

RHSA-2011_0007

RHSA-2011_0017

Produtos afetados

Linux Kernel

Red Hat

Referências · 94

• 🔥 http://openwall.com/lists/oss-security/2010/12/06/9 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2010/12/06/3 · Exploit
• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=660188 · Exploit
• 🔥 https://bugzilla.kernel.org/show_bug.cgi?id=15582 · Exploit
• https://access.redhat.com/errata/RHSA-2011:0017 · Nota
• https://access.redhat.com/security/cve/CVE-2010-4263 · Nota
• https://access.redhat.com/security/cve/CVE-2010-4075 · Nota
• https://linux.oracle.com/errata/ELSA-2011-0007.html · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2010-3078 · Nota
• https://access.redhat.com/security/cve/CVE-2010-3477 · Nota
• https://bdu.fstec.ru/vul/2015-04590 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2010-4080 · Nota
• https://access.redhat.com/security/cve/CVE-2010-3861 · Nota
• https://bdu.fstec.ru/vul/2015-04609 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2010-4081 · Nota