Lucene search

[email protected]NVD:CVE-2010-1188

HistoryMar 31, 2010 - 6:00 p.m.

CVE-2010-1188

2010-03-3118:00:00

CWE-399

[email protected]

web.nvd.nist.gov

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

6.2 Medium

AI Score

Confidence

Low

0.048 Low

EPSS

Percentile

92.8%

JSON

Use-after-free vulnerability in net/ipv4/tcp_input.c in the Linux kernel 2.6 before 2.6.20, when IPV6_RECVPKTINFO is set on a listening socket, allows remote attackers to cause a denial of service (kernel panic) via a SYN packet while the socket is in a listening (TCP_LISTEN) state, which is not properly handled and causes the skb structure to be freed.

Affected configurations

NVD

Node

linuxlinux_kernelMatch2.6.0

linuxlinux_kernelMatch2.6.1

linuxlinux_kernelMatch2.6.2

linuxlinux_kernelMatch2.6.10

linuxlinux_kernelMatch2.6.11

linuxlinux_kernelMatch2.6.11.1

linuxlinux_kernelMatch2.6.11.2

linuxlinux_kernelMatch2.6.11.3

linuxlinux_kernelMatch2.6.11.4

linuxlinux_kernelMatch2.6.11.5

linuxlinux_kernelMatch2.6.11.6

linuxlinux_kernelMatch2.6.11.7

linuxlinux_kernelMatch2.6.11.8

linuxlinux_kernelMatch2.6.11.9

linuxlinux_kernelMatch2.6.11.10

linuxlinux_kernelMatch2.6.11.11

linuxlinux_kernelMatch2.6.11.12

linuxlinux_kernelMatch2.6.12

linuxlinux_kernelMatch2.6.12.1

linuxlinux_kernelMatch2.6.12.2

linuxlinux_kernelMatch2.6.12.3

linuxlinux_kernelMatch2.6.12.4

linuxlinux_kernelMatch2.6.12.5

linuxlinux_kernelMatch2.6.12.6

linuxlinux_kernelMatch2.6.13

linuxlinux_kernelMatch2.6.13.1

linuxlinux_kernelMatch2.6.13.2

linuxlinux_kernelMatch2.6.13.3

linuxlinux_kernelMatch2.6.13.4

linuxlinux_kernelMatch2.6.13.5

linuxlinux_kernelMatch2.6.14

linuxlinux_kernelMatch2.6.14.1

linuxlinux_kernelMatch2.6.14.2

linuxlinux_kernelMatch2.6.14.3

linuxlinux_kernelMatch2.6.14.4

linuxlinux_kernelMatch2.6.14.5

linuxlinux_kernelMatch2.6.14.6

linuxlinux_kernelMatch2.6.14.7

linuxlinux_kernelMatch2.6.15

linuxlinux_kernelMatch2.6.15.1

linuxlinux_kernelMatch2.6.15.2

linuxlinux_kernelMatch2.6.15.3

linuxlinux_kernelMatch2.6.15.4

linuxlinux_kernelMatch2.6.15.5

linuxlinux_kernelMatch2.6.15.6

linuxlinux_kernelMatch2.6.15.7

linuxlinux_kernelMatch2.6.16

linuxlinux_kernelMatch2.6.16.1

linuxlinux_kernelMatch2.6.16.2

linuxlinux_kernelMatch2.6.16.3

linuxlinux_kernelMatch2.6.16.4

linuxlinux_kernelMatch2.6.16.5

linuxlinux_kernelMatch2.6.16.6

linuxlinux_kernelMatch2.6.16.7

linuxlinux_kernelMatch2.6.16.8

linuxlinux_kernelMatch2.6.16.9

linuxlinux_kernelMatch2.6.16.10

linuxlinux_kernelMatch2.6.16.11

linuxlinux_kernelMatch2.6.16.12

linuxlinux_kernelMatch2.6.16.13

linuxlinux_kernelMatch2.6.16.14

linuxlinux_kernelMatch2.6.16.15

linuxlinux_kernelMatch2.6.16.16

linuxlinux_kernelMatch2.6.16.17

linuxlinux_kernelMatch2.6.16.18

linuxlinux_kernelMatch2.6.16.19

linuxlinux_kernelMatch2.6.16.20

linuxlinux_kernelMatch2.6.16.21

linuxlinux_kernelMatch2.6.16.22

linuxlinux_kernelMatch2.6.16.23

linuxlinux_kernelMatch2.6.16.24

linuxlinux_kernelMatch2.6.16.25

linuxlinux_kernelMatch2.6.16.26

linuxlinux_kernelMatch2.6.16.27

linuxlinux_kernelMatch2.6.16.28

linuxlinux_kernelMatch2.6.16.29

linuxlinux_kernelMatch2.6.16.30

linuxlinux_kernelMatch2.6.16.31

linuxlinux_kernelMatch2.6.16.32

linuxlinux_kernelMatch2.6.16.33

linuxlinux_kernelMatch2.6.16.34

linuxlinux_kernelMatch2.6.16.35

linuxlinux_kernelMatch2.6.16.36

linuxlinux_kernelMatch2.6.16.37

linuxlinux_kernelMatch2.6.16.38

linuxlinux_kernelMatch2.6.16.39

linuxlinux_kernelMatch2.6.16.40

linuxlinux_kernelMatch2.6.16.41

linuxlinux_kernelMatch2.6.16.42

linuxlinux_kernelMatch2.6.16.43

linuxlinux_kernelMatch2.6.16.44

linuxlinux_kernelMatch2.6.16.45

linuxlinux_kernelMatch2.6.16.46

linuxlinux_kernelMatch2.6.16.47

linuxlinux_kernelMatch2.6.16.48

linuxlinux_kernelMatch2.6.16.49

linuxlinux_kernelMatch2.6.16.50

linuxlinux_kernelMatch2.6.16.51

linuxlinux_kernelMatch2.6.16.52

linuxlinux_kernelMatch2.6.16.53

linuxlinux_kernelMatch2.6.16.54

linuxlinux_kernelMatch2.6.16.55

linuxlinux_kernelMatch2.6.16.56

linuxlinux_kernelMatch2.6.16.57

linuxlinux_kernelMatch2.6.16.58

linuxlinux_kernelMatch2.6.16.59

linuxlinux_kernelMatch2.6.16.60

linuxlinux_kernelMatch2.6.16.61

linuxlinux_kernelMatch2.6.16.62

linuxlinux_kernelMatch2.6.17

linuxlinux_kernelMatch2.6.17rc1

linuxlinux_kernelMatch2.6.17rc2

linuxlinux_kernelMatch2.6.17rc3

linuxlinux_kernelMatch2.6.17rc4

linuxlinux_kernelMatch2.6.17rc5

linuxlinux_kernelMatch2.6.17rc6

linuxlinux_kernelMatch2.6.17.1

linuxlinux_kernelMatch2.6.17.2

linuxlinux_kernelMatch2.6.17.3

linuxlinux_kernelMatch2.6.17.4

linuxlinux_kernelMatch2.6.17.5

linuxlinux_kernelMatch2.6.17.6

linuxlinux_kernelMatch2.6.17.7

linuxlinux_kernelMatch2.6.17.8

linuxlinux_kernelMatch2.6.17.9

linuxlinux_kernelMatch2.6.17.10

linuxlinux_kernelMatch2.6.17.11

linuxlinux_kernelMatch2.6.17.12

linuxlinux_kernelMatch2.6.17.13

linuxlinux_kernelMatch2.6.17.14

linuxlinux_kernelMatch2.6.18

linuxlinux_kernelMatch2.6.18rc1

linuxlinux_kernelMatch2.6.18rc2

linuxlinux_kernelMatch2.6.18rc3

linuxlinux_kernelMatch2.6.18rc4

linuxlinux_kernelMatch2.6.18rc5

linuxlinux_kernelMatch2.6.18rc6

linuxlinux_kernelMatch2.6.18rc7

linuxlinux_kernelMatch2.6.18.1

linuxlinux_kernelMatch2.6.18.2

linuxlinux_kernelMatch2.6.18.3

linuxlinux_kernelMatch2.6.18.4

linuxlinux_kernelMatch2.6.18.5

linuxlinux_kernelMatch2.6.18.6

linuxlinux_kernelMatch2.6.18.7

linuxlinux_kernelMatch2.6.18.8

linuxlinux_kernelMatch2.6.19

linuxlinux_kernelMatch2.6.19.1

linuxlinux_kernelMatch2.6.19.2

linuxlinux_kernelMatch2.6.19.3

linuxlinux_kernelMatch2.6.19.4

linuxlinux_kernelMatch2.6.19.5

linuxlinux_kernelMatch2.6.19.6

linuxlinux_kernelMatch2.6.19.7

References

git.kernel.org/linus/fb7e2399ec17f1004c0e0ccfd17439f8759ede01

secunia.com/advisories/39652

support.avaya.com/css/P8/documents/100090459

www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20

www.openwall.com/lists/oss-security/2010/03/29/1

www.redhat.com/support/errata/RHSA-2010-0380.html

www.redhat.com/support/errata/RHSA-2010-0394.html

www.redhat.com/support/errata/RHSA-2010-0424.html

www.redhat.com/support/errata/RHSA-2010-0439.html

www.redhat.com/support/errata/RHSA-2010-0882.html

www.securityfocus.com/bid/39016

www.securitytracker.com/id?1023992

www.vmware.com/security/advisories/VMSA-2011-0009.html

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9878

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

6.2 Medium

AI Score

Confidence

Low

0.048 Low

EPSS

Percentile

92.8%

JSON

Related for NVD:CVE-2010-1188

cve1 redhat7 prion1 cvelist1 ubuntucve1 veracode1 nessus15 checkpoint_security1 seebug1 oraclelinux2 openvas10 centos1 vmware2 suse1 ubuntu2