Lucene search

RedhatCVE-2010-2522

HistoryJul 13, 2010 - 5:30 p.m.

CVE-2010-2522

2010-07-1317:30:04

CWE-264

redhat

web.nvd.nist.gov

cve-2010-2522

mipv6

umip

netlink

spoofing

communication

security vulnerability

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

Low

EPSS

Percentile

5.1%

JSON

The mipv6 daemon in UMIP 0.4 does not verify that netlink messages originated in the kernel, which allows local users to spoof netlink socket communication via a crafted unicast message.

Affected configurations

Nvd

Node

linux-ipv6umipMatch0.4

VendorProductVersionCPE
linux-ipv6umip0.4cpe:2.3:a:linux-ipv6:umip:0.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
linux-ipv6	umip	0.4	cpe:2.3:a:linux-ipv6:umip:0.4:::::::*

References

lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html

marc.info/?l=oss-security&m=127850299910685&w=2

marc.info/?l=oss-security&m=127859390815405&w=2

www.openwall.com/lists/oss-security/2010/07/06/5

www.openwall.com/lists/oss-security/2010/07/07/4

www.openwall.com/lists/oss-security/2010/07/09/1

www.securityfocus.com/bid/41524

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2010-2522