ID |
CVE-2010-4161
|
Summary |
The udp_queue_rcv_skb function in net/ipv4/udp.c in a certain Red Hat build of the Linux kernel 2.6.18 in Red Hat Enterprise Linux (RHEL) 5 allows attackers to cause a denial of service (deadlock and system hang) by sending UDP traffic to a socket that has a crafted socket filter, a related issue to CVE-2010-4158. |
References |
|
Vulnerable Configurations |
|
CVSS |
Base: | 4.9 (as of 10-10-2018 - 20:07) |
Impact: | |
Exploitability: | |
|
CWE |
CWE-399 |
CAPEC |
|
Access |
Vector | Complexity | Authentication |
LOCAL |
LOW |
NONE |
|
Impact |
Confidentiality | Integrity | Availability |
NONE |
NONE |
COMPLETE |
|
cvss-vector
via4
|
AV:L/AC:L/Au:N/C:N/I:N/A:C
|
redhat
via4
|
advisories | | rpms | - kernel-0:2.6.18-194.32.1.el5
- kernel-PAE-0:2.6.18-194.32.1.el5
- kernel-PAE-debuginfo-0:2.6.18-194.32.1.el5
- kernel-PAE-devel-0:2.6.18-194.32.1.el5
- kernel-debug-0:2.6.18-194.32.1.el5
- kernel-debug-debuginfo-0:2.6.18-194.32.1.el5
- kernel-debug-devel-0:2.6.18-194.32.1.el5
- kernel-debuginfo-0:2.6.18-194.32.1.el5
- kernel-debuginfo-common-0:2.6.18-194.32.1.el5
- kernel-devel-0:2.6.18-194.32.1.el5
- kernel-doc-0:2.6.18-194.32.1.el5
- kernel-headers-0:2.6.18-194.32.1.el5
- kernel-kdump-0:2.6.18-194.32.1.el5
- kernel-kdump-debuginfo-0:2.6.18-194.32.1.el5
- kernel-kdump-devel-0:2.6.18-194.32.1.el5
- kernel-xen-0:2.6.18-194.32.1.el5
- kernel-xen-debuginfo-0:2.6.18-194.32.1.el5
- kernel-xen-devel-0:2.6.18-194.32.1.el5
|
|
refmap
via4
|
bugtraq | - 20101118 Re: Kernel 0-day
- 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console
| confirm | | mlist | [netdev] 20101110 Re: [PATCH] Prevent reading uninitialized memory with socket filters | secunia | | vupen | ADV-2011-0024 | xf | kernel-udpqueuercvskb-dos(64497) |
|
Last major update |
10-10-2018 - 20:07 |
Published |
30-12-2010 - 19:00 |
Last modified |
10-10-2018 - 20:07 |