PT-2011-1465 · Linux+2 · Linux Kernel+2
Dan Rosenberg
·
Published
2011-01-07
·
Updated
2023-02-13
·
CVE-2010-4160
CVSS v2.0
6.9
Medium
| Vector | AV:L/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 2.6.36.2
Description
The issue is related to multiple integer overflows in the PPPoL2TP and IPoL2TP implementations. Specifically, the
pppol2tp sendmsg function in net/l2tp/l2tp ppp.c and the l2tp ip sendmsg function in net/l2tp/l2tp ip.c are affected. This can allow local users to cause a denial of service, resulting in heap memory corruption and panic, or possibly gain privileges via a crafted sendto call.Recommendations
For Linux kernel versions prior to 2.6.36.2, update to version 2.6.36.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the
sendto call to minimize the risk of exploitation.Exploit
Fix
DoS
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel
Red Hat
Suse