Ubuntu.comUB:CVE-2010-2495CVE-2010-2495
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.011 Low
EPSS
Percentile
84.4%
The pppol2tp_xmit function in drivers/net/pppol2tp.c in the L2TP
implementation in the Linux kernel before 2.6.34 does not properly validate
certain values associated with an interface, which allows attackers to
cause a denial of service (NULL pointer dereference and OOPS) or possibly
have unspecified other impact via vectors related to a routing change.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 9.10 | noarch | linux | < 2.6.31-22.67 | UNKNOWN |
| ubuntu | 9.10 | noarch | linux-ec2 | < 2.6.31-307.21 | UNKNOWN |
| ubuntu | 10.04 | noarch | linux-ec2 | < 2.6.32-309.18 | UNKNOWN |
| ubuntu | 9.10 | noarch | linux-fsl-imx51 | < 2.6.31-112.30 | UNKNOWN |
| ubuntu | 10.04 | noarch | linux-fsl-imx51 | < 2.6.31-608.22 | UNKNOWN |
| ubuntu | 10.04 | noarch | linux-lts-backport-maverick | < 2.6.35-25.44~lucid1 | UNKNOWN |
References
launchpad.net/bugs/cve/CVE-2010-2495
nvd.nist.gov/vuln/detail/CVE-2010-2495
security-tracker.debian.org/tracker/CVE-2010-2495
ubuntu.com/security/notices/USN-1000-1
ubuntu.com/security/notices/USN-1074-1
ubuntu.com/security/notices/USN-1074-2
ubuntu.com/security/notices/USN-1083-1
www.cve.org/CVERecord?id=CVE-2010-2495
Related
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.011 Low
EPSS
Percentile
84.4%