CVE-2010-0437
- State
- Published
- Severity
- Not scored
- Published
- Mar 24, 2010
- Updated
- Aug 7, 2024
- Reserved
- Jan 27, 2010
Description
The ip6_dst_lookup_tail function in net/ipv6/ip6_output.c in the Linux kernel before 2.6.27 does not properly handle certain circumstances involving an IPv6 TUN network interface and a large number of neighbors, which allows attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via unknown vectors.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- RHSA-2010:0147vendor-advisory
- http://bugzilla.kernel.org/show_bug.cgi?id=11469
- oval:org.mitre.oval:def:10061vdb-entrysignature
- [oss-security] 20100211 CVE request - kernel: ip6_dst_lookup_tail() NULL pointer dereferencemailing-list
- 43315third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=563781
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27
- 39033third-party-advisory
- [oss-security] 20100304 Re: CVE request - kernel: ip6_dst_lookup_tail() NULL pointer dereferencemailing-list
- http://www.vmware.com/security/advisories/VMSA-2011-0003.html
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e550dfb0c2c31b6363aa463a035fc9f8dcaa3c9b
- 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESXmailing-list
- RHSA-2010:0161vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.