PT-2010-2201 · Linux+1 · Linux Kernel+1

Eugene Teo · Published 2010-03-17 · Updated 2023-02-13 · CVE-2010-0437

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.27

Description The issue is related to the ip6 dst lookup tail function in the Linux kernel, which does not properly handle certain circumstances involving an IPv6 TUN network interface and a large number of neighbors. This can allow attackers to cause a denial of service, resulting in a NULL pointer dereference and OOPS, or possibly have other unspecified impacts.

Recommendations For Linux kernel versions prior to 2.6.27, update to version 2.6.27 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2010-0437

RHSA-2010:0147

RHSA-2010:0148

RHSA-2010:0149

RHSA-2010:0161

RHSA-2010_0147

Affected Products

Linux Kernel

Red Hat

References · 24

• 🔥 http://bugzilla.kernel.org/show_bug.cgi?id=11469 · Exploit
• 🔥 https://exploit-db.com/exploits/33635 · Exploit
• https://bdu.fstec.ru/vul/2015-05251 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2010-0437 · Security Note
• http://redhat.com/support/errata/RHSA-2010-0147.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2010-0161.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-05250 · Security Note
• http://secunia.com/advisories/39033 · Note
• https://access.redhat.com/security/cve/CVE-2010-0008 · Note
• http://openwall.com/lists/oss-security/2010/03/04/4 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10061 · Note
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e550dfb0c2c31b6363aa463a035fc9f8dcaa3c9b · Note
• https://access.redhat.com/security/cve/CVE-2010-0437 · Note
• https://access.redhat.com/security/cve/CVE-2010-0007 · Note
• http://secunia.com/advisories/43315 · Note