CVE-2010-4249
6.8 Medium
AI Score
Confidence
High
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
0.0004 Low
EPSS
Percentile
0.4%
The wait_for_unix_gc function in net/unix/garbage.c in the Linux kernel before 2.6.37-rc3-next-20101125 does not properly select times for garbage collection of inflight sockets, which allows local users to cause a denial of service (system hang) via crafted use of the socketpair and sendmsg system calls for SOCK_SEQPACKET sockets.
| CPE | Name | Operator | Version |
|---|---|---|---|
| linux:linux_kernel | linux linux kernel | eq | 2.6.37 |
| fedoraproject:fedora | fedoraproject fedora | eq | 13 |
References
git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=9915672d41273f5b77f1b3c29b391ffb7732b84b
lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.html
lkml.org/lkml/2010/11/23/395
lkml.org/lkml/2010/11/23/450
lkml.org/lkml/2010/11/25/8
marc.info/?l=linux-netdev&m=129059035929046&w=2
secunia.com/advisories/42354
secunia.com/advisories/42745
secunia.com/advisories/42890
secunia.com/advisories/42963
secunia.com/advisories/46397
www.exploit-db.com/exploits/15622/
www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.37-rc3-next-20101125.bz2
www.openwall.com/lists/oss-security/2010/11/24/10
www.openwall.com/lists/oss-security/2010/11/24/2
www.redhat.com/support/errata/RHSA-2011-0007.html
www.redhat.com/support/errata/RHSA-2011-0162.html
www.securityfocus.com/archive/1/520102/100/0/threaded
www.securityfocus.com/bid/45037
www.vmware.com/security/advisories/VMSA-2011-0012.html
www.vupen.com/english/advisories/2010/3321
www.vupen.com/english/advisories/2011/0168
bugzilla.redhat.com/show_bug.cgi?id=656756
Social References
More
Related
6.8 Medium
AI Score
Confidence
High
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
0.0004 Low
EPSS
Percentile
0.4%