PT-2011-1487 · Linux+1 · Linux Kernel+1

Eugene Teo

·

Published

2011-03-01

·

Updated

2023-02-13

·

CVE-2010-4251

CVSS v2.0

7.8

High

VectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.34
Description The issue is related to the socket implementation in the Linux kernel, which does not properly manage a backlog of received packets. This allows remote attackers to cause a denial of service by consuming memory through sending a large amount of network traffic.
Recommendations For Linux kernel versions prior to 2.6.34, update to version 2.6.34 or later to resolve the issue.

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2010-4251
RHSA-2011:0303
RHSA-2011:0542
RHSA-2011:0883
RHSA-2011_0303
RHSA-2011_0542
RHSA-2011_0883

Affected Products

Linux Kernel
Red Hat