CVE-2010-4160
7.5 High
AI Score
Confidence
High
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
9.3%
Multiple integer overflows in the (1) pppol2tp_sendmsg function in net/l2tp/l2tp_ppp.c, and the (2) l2tp_ip_sendmsg function in net/l2tp/l2tp_ip.c, in the PPPoL2TP and IPoL2TP implementations in the Linux kernel before 2.6.36.2 allow local users to cause a denial of service (heap memory corruption and panic) or possibly gain privileges via a crafted sendto call.
References
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=253eacc070b114c2ec1f81b067d2fed7305467b0
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8acfe468b0384e834a303f08ebc4953d72fb690a
lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html
lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html
lists.opensuse.org/opensuse-security-announce/2011-01/msg00007.html
lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html
openwall.com/lists/oss-security/2010/11/10/16
openwall.com/lists/oss-security/2010/11/10/5
openwall.com/lists/oss-security/2010/11/24/12
openwall.com/lists/oss-security/2010/11/24/4
openwall.com/lists/oss-security/2010/11/24/5
openwall.com/lists/oss-security/2010/11/24/6
secunia.com/advisories/42801
secunia.com/advisories/42890
secunia.com/advisories/42932
secunia.com/advisories/43056
secunia.com/advisories/43291
www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36.2
www.redhat.com/support/errata/RHSA-2011-0007.html
www.securityfocus.com/bid/44762
www.spinics.net/lists/netdev/msg145248.html
www.spinics.net/lists/netdev/msg145673.html
www.vupen.com/english/advisories/2011/0012
www.vupen.com/english/advisories/2011/0124
www.vupen.com/english/advisories/2011/0213
www.vupen.com/english/advisories/2011/0375
xorl.wordpress.com/2010/11/11/cve-2010-4160-linux-kernel-l2tp-integer-overflows/
bugzilla.redhat.com/show_bug.cgi?id=651892
Social References
More
Related
7.5 High
AI Score
Confidence
High
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
9.3%