PT-2010-2484 · Linux+1 · Linux Kernel+1

Petr Matousek · Published 2010-03-29 · Updated 2023-02-13 · CVE-2010-0741

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.26

Description The issue allows remote attackers to cause a denial of service, resulting in a guest OS crash and an associated qemu-kvm process exit. This is achieved by sending a large amount of network traffic to a TCP port on the guest OS. The problem is related to an improper implementation of TCP Segment Offloading (TSO) in the virtio-net whitelist.

Recommendations For Linux kernel versions prior to 2.6.26, update to version 2.6.26 or later to resolve the issue.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2010-0741

RHSA-2010:0271

RHSA-2010:0476

RHSA-2010_0271

Affected Products

Linux Kernel

Red Hat

References · 16

• https://rhn.redhat.com/errata/RHSA-2010-0476.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2010-0271.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0741 · Security Note
• http://vupen.com/english/advisories/2010/0760 · Vendor Advisory
• http://lists.gnu.org/archive/html/qemu-devel/2009-10/msg02480.html · Note
• http://git.kernel.org/?p=virt/kvm/qemu-kvm.git%3Ba=commit%3Bh=184bd0484533b725194fa517ddc271ffd74da7c9 · Note
• http://securitytracker.com/id?1023798 · Note
• https://access.redhat.com/errata/RHSA-2010:0271 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=577218 · Note
• https://bugs.edge.launchpad.net/ubuntu/+source/qemu-kvm/+bug/458521 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11143 · Note
• https://access.redhat.com/security/cve/CVE-2010-0430 · Note
• http://lists.gnu.org/archive/html/qemu-devel/2009-10/msg02495.html · Note
• http://openwall.com/lists/oss-security/2010/03/29/4 · Note
• https://patchwork.kernel.org/patch/56479 · Note