CVE-2010-1188
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.3%
Use-after-free vulnerability in net/ipv4/tcp_input.c in the Linux kernel 2.6 before 2.6.20, when IPV6_RECVPKTINFO is set on a listening socket, allows remote attackers to cause a denial of service (kernel panic) via a SYN packet while the socket is in a listening (TCP_LISTEN) state, which is not properly handled and causes the skb structure to be freed.
Produtos afetados
n/a · n/aReferências
http://git.kernel.org/linus/fb7e2399ec17f1004c0e0ccfd17439f8759ede01http://secunia.com/advisories/39652https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9878http://support.avaya.com/css/P8/documents/100090459http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20http://www.openwall.com/lists/oss-security/2010/03/29/1http://www.redhat.com/support/errata/RHSA-2010-0380.htmlhttp://www.redhat.com/support/errata/RHSA-2010-0394.htmlhttp://www.redhat.com/support/errata/RHSA-2010-0424.htmlhttp://www.redhat.com/support/errata/RHSA-2010-0439.htmlhttp://www.redhat.com/support/errata/RHSA-2010-0882.htmlhttp://www.securityfocus.com/bid/39016