CVE-2010-4249

🗓️ 29 Nov 2010 15:00:00Reported by redhatType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 200 Views

The wait_for_unix_gc function in net/unix/garbage.c in the Linux kernel before 2.6.37-rc3-next-20101125 does not properly select times for garbage collection of inflight sockets, which allows local users to cause a denial of service (system hang) via crafted use of the socketpair and sendmsg system calls for SOCK_SEQPACKET sockets

Reporter	Title	Published	Views	Family All 165
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec

NVD

Node

linux linux_kernelRange<2.6.37

linux linux_kernelMatch2.6.37-

linux linux_kernelMatch2.6.37rc1

linux linux_kernelMatch2.6.37rc2

Node

fedoraproject fedoraMatch13

Source	Link
secunia	www.secunia.com/advisories/46397
lkml	www.lkml.org/lkml/2010/11/23/395
lkml	www.lkml.org/lkml/2010/11/25/8
vmware	www.vmware.com/security/advisories/VMSA-2011-0012.html
marc	www.marc.info/
securityfocus	www.securityfocus.com/bid/45037
openwall	www.openwall.com/lists/oss-security/2010/11/24/2
exploit-db	www.exploit-db.com/exploits/15622/
lists	www.lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.html
lkml	www.lkml.org/lkml/2010/11/23/450

16 Jun 2026 23:24Current

6.8Medium risk

Vulners AI Score6.8

CVSS 24.9

EPSS0.00896

CWE-400