PT-2010-5696 · Linux+1 · Linux Kernel+1

Published 1970-01-01 · Updated 2023-02-13 · CVE-2010-4164

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions SUSE Linux Enterprise (affected versions not specified)

Description The issue involves multiple vulnerabilities in the Linux kernel that can lead to a denial of service, causing disruption to the availability of protected information. These vulnerabilities can be exploited remotely. Specifically, there are multiple integer underflows in the x25 parse facilities function in net/x25/x25 facilities.c that allow remote attackers to cause a system crash via malformed X.25 facility data, including X25 FAC CLASS A, X25 FAC CLASS B, X25 FAC CLASS C, or X25 FAC CLASS D facilities.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Information Disclosure

Integer Underflow

Weakness Enumeration

CWE-200

CWE-191

Related Identifiers

BDU:2015-04589

BDU:2015-04590

CVE-2010-4164

DSA-2126-1

Affected Products

Linux Kernel

Suse

References · 27

• http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04590 · Security Note
• https://bdu.fstec.ru/vul/2015-04589 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=652517 · Patch
• http://mandriva.com/security/advisories?name=MDVSA-2011:029 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-4164 · Security Note
• http://marc.info/?l=linux-netdev&m=128951543005554&w=2 · Patch
• http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html · Vendor Advisory
• http://debian.org/security/2010/dsa-2126 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html · Vendor Advisory
• http://vupen.com/english/advisories/2011/0298 · Note
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5ef41308f94dcbb3b7afc56cdef1c2ba53fa5d2f · Note