PT-2011-1490 · Linux+1 · Linux Kernel+1

Kosuke Tatsukawa · Published 2011-01-11 · Updated 2023-02-13 · CVE-2010-4263

Positive Technologies (AI Summary)

CVSS v2.0

7.9

High

Base vector

AV:A/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.34

Description The issue is related to the igb receive skb function in the Intel Gigabit Ethernet subsystem. When Single Root I/O Virtualization (SR-IOV) and promiscuous mode are enabled but no VLANs are registered, remote attackers can cause a denial of service (NULL pointer dereference and panic) and possibly have other unspecified impacts via a VLAN tagged frame.

Recommendations For Linux kernel versions prior to 2.6.34, update to version 2.6.34 or later to resolve the issue.

Exploit

Fix

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2010-4263

RHSA-2011:0007

RHSA-2011:0017

RHSA-2011_0007

RHSA-2011_0017

Affected Products

Linux Kernel

Red Hat

References · 94

• 🔥 http://openwall.com/lists/oss-security/2010/12/06/9 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2010/12/06/3 · Exploit
• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=660188 · Exploit
• 🔥 https://bugzilla.kernel.org/show_bug.cgi?id=15582 · Exploit
• https://linux.oracle.com/errata/ELSA-2011-0007.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04590 · Security Note
• https://bdu.fstec.ru/vul/2015-04609 · Security Note
• https://bdu.fstec.ru/vul/2015-06267 · Security Note
• https://bdu.fstec.ru/vul/2015-08636 · Security Note
• https://bdu.fstec.ru/vul/2015-06266 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2010-4263 · Security Note
• http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-08632 · Security Note
• https://bdu.fstec.ru/vul/2015-06261 · Security Note
• https://bdu.fstec.ru/vul/2015-08638 · Security Note