Lucene search
RedhatCVE-2010-0437HistoryMar 24, 2010 - 1:34 p.m.
CVE-2010-0437
2010-03-2413:34:34
redhat
web.nvd.nist.gov
66
11
cve-2010-0437
linux kernel
ip6_dst_lookup_tail
net/ipv6/ip6_output.c
denial of service
null pointer dereference
oops
ipv6
tun network interface
nvd
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
AI Score
7.6
Confidence
High
EPSS
0.056
Percentile
93.3%
The ip6_dst_lookup_tail function in net/ipv6/ip6_output.c in the Linux kernel before 2.6.27 does not properly handle certain circumstances involving an IPv6 TUN network interface and a large number of neighbors, which allows attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via unknown vectors.
Affected configurations
Node
linuxlinux_kernelRange≤2.6.26.8
ORlinuxlinux_kernelMatch2.6.0
ORlinuxlinux_kernelMatch2.6.1
ORlinuxlinux_kernelMatch2.6.2
ORlinuxlinux_kernelMatch2.6.3
ORlinuxlinux_kernelMatch2.6.4
ORlinuxlinux_kernelMatch2.6.5
ORlinuxlinux_kernelMatch2.6.6
ORlinuxlinux_kernelMatch2.6.7
ORlinuxlinux_kernelMatch2.6.8
ORlinuxlinux_kernelMatch2.6.8.1
ORlinuxlinux_kernelMatch2.6.9
ORlinuxlinux_kernelMatch2.6.9rc1
ORlinuxlinux_kernelMatch2.6.9rc2
ORlinuxlinux_kernelMatch2.6.9rc3
ORlinuxlinux_kernelMatch2.6.9rc4
ORlinuxlinux_kernelMatch2.6.10
ORlinuxlinux_kernelMatch2.6.11
ORlinuxlinux_kernelMatch2.6.11.1
ORlinuxlinux_kernelMatch2.6.11.2
ORlinuxlinux_kernelMatch2.6.11.3
ORlinuxlinux_kernelMatch2.6.11.4
ORlinuxlinux_kernelMatch2.6.11.5
ORlinuxlinux_kernelMatch2.6.11.6
ORlinuxlinux_kernelMatch2.6.11.7
ORlinuxlinux_kernelMatch2.6.11.8
ORlinuxlinux_kernelMatch2.6.11.9
ORlinuxlinux_kernelMatch2.6.11.10
ORlinuxlinux_kernelMatch2.6.11.11
ORlinuxlinux_kernelMatch2.6.11.12
ORlinuxlinux_kernelMatch2.6.12
ORlinuxlinux_kernelMatch2.6.12.1
ORlinuxlinux_kernelMatch2.6.12.2
ORlinuxlinux_kernelMatch2.6.12.3
ORlinuxlinux_kernelMatch2.6.12.4
ORlinuxlinux_kernelMatch2.6.12.5
ORlinuxlinux_kernelMatch2.6.12.6
ORlinuxlinux_kernelMatch2.6.13
ORlinuxlinux_kernelMatch2.6.13.1
ORlinuxlinux_kernelMatch2.6.13.2
ORlinuxlinux_kernelMatch2.6.13.3
ORlinuxlinux_kernelMatch2.6.13.4
ORlinuxlinux_kernelMatch2.6.13.5
ORlinuxlinux_kernelMatch2.6.14
ORlinuxlinux_kernelMatch2.6.14.1
ORlinuxlinux_kernelMatch2.6.14.2
ORlinuxlinux_kernelMatch2.6.14.3
ORlinuxlinux_kernelMatch2.6.14.4
ORlinuxlinux_kernelMatch2.6.14.5
ORlinuxlinux_kernelMatch2.6.14.6
ORlinuxlinux_kernelMatch2.6.14.7
ORlinuxlinux_kernelMatch2.6.15
ORlinuxlinux_kernelMatch2.6.15.1
ORlinuxlinux_kernelMatch2.6.15.2
ORlinuxlinux_kernelMatch2.6.15.3
ORlinuxlinux_kernelMatch2.6.15.4
ORlinuxlinux_kernelMatch2.6.15.5
ORlinuxlinux_kernelMatch2.6.15.6
ORlinuxlinux_kernelMatch2.6.15.7
ORlinuxlinux_kernelMatch2.6.16
ORlinuxlinux_kernelMatch2.6.16.1
ORlinuxlinux_kernelMatch2.6.16.2
ORlinuxlinux_kernelMatch2.6.16.3
ORlinuxlinux_kernelMatch2.6.16.4
ORlinuxlinux_kernelMatch2.6.16.5
ORlinuxlinux_kernelMatch2.6.16.6
ORlinuxlinux_kernelMatch2.6.16.7
ORlinuxlinux_kernelMatch2.6.16.8
ORlinuxlinux_kernelMatch2.6.16.9
ORlinuxlinux_kernelMatch2.6.16.10
ORlinuxlinux_kernelMatch2.6.16.11
ORlinuxlinux_kernelMatch2.6.16.12
ORlinuxlinux_kernelMatch2.6.16.13
ORlinuxlinux_kernelMatch2.6.16.14
ORlinuxlinux_kernelMatch2.6.16.15
ORlinuxlinux_kernelMatch2.6.16.16
ORlinuxlinux_kernelMatch2.6.16.17
ORlinuxlinux_kernelMatch2.6.16.18
ORlinuxlinux_kernelMatch2.6.16.19
ORlinuxlinux_kernelMatch2.6.16.20
ORlinuxlinux_kernelMatch2.6.16.21
ORlinuxlinux_kernelMatch2.6.16.22
ORlinuxlinux_kernelMatch2.6.16.23
ORlinuxlinux_kernelMatch2.6.16.24
ORlinuxlinux_kernelMatch2.6.16.25
ORlinuxlinux_kernelMatch2.6.16.26
ORlinuxlinux_kernelMatch2.6.16.27
ORlinuxlinux_kernelMatch2.6.16.28
ORlinuxlinux_kernelMatch2.6.16.29
ORlinuxlinux_kernelMatch2.6.16.30
ORlinuxlinux_kernelMatch2.6.16.31
ORlinuxlinux_kernelMatch2.6.16.31-rc1
ORlinuxlinux_kernelMatch2.6.16.31-rc2
ORlinuxlinux_kernelMatch2.6.16.31-rc3
ORlinuxlinux_kernelMatch2.6.16.31-rc4
ORlinuxlinux_kernelMatch2.6.16.31-rc5
ORlinuxlinux_kernelMatch2.6.16.32
ORlinuxlinux_kernelMatch2.6.16.33
ORlinuxlinux_kernelMatch2.6.16.34
ORlinuxlinux_kernelMatch2.6.16.35
ORlinuxlinux_kernelMatch2.6.16.36
ORlinuxlinux_kernelMatch2.6.16.37
ORlinuxlinux_kernelMatch2.6.16.38
ORlinuxlinux_kernelMatch2.6.16.39
ORlinuxlinux_kernelMatch2.6.16.40
ORlinuxlinux_kernelMatch2.6.16.41
ORlinuxlinux_kernelMatch2.6.16.42
ORlinuxlinux_kernelMatch2.6.16.43
ORlinuxlinux_kernelMatch2.6.16.44
ORlinuxlinux_kernelMatch2.6.16.45
ORlinuxlinux_kernelMatch2.6.16.46
ORlinuxlinux_kernelMatch2.6.16.47
ORlinuxlinux_kernelMatch2.6.16.48
ORlinuxlinux_kernelMatch2.6.16.49
ORlinuxlinux_kernelMatch2.6.16.50
ORlinuxlinux_kernelMatch2.6.16.51
ORlinuxlinux_kernelMatch2.6.16.52
ORlinuxlinux_kernelMatch2.6.16.53
ORlinuxlinux_kernelMatch2.6.16.54
ORlinuxlinux_kernelMatch2.6.16.55
ORlinuxlinux_kernelMatch2.6.16.56
ORlinuxlinux_kernelMatch2.6.16.57
ORlinuxlinux_kernelMatch2.6.16.58
ORlinuxlinux_kernelMatch2.6.16.59
ORlinuxlinux_kernelMatch2.6.16.60
ORlinuxlinux_kernelMatch2.6.16.61
ORlinuxlinux_kernelMatch2.6.16.62
ORlinuxlinux_kernelMatch2.6.17
ORlinuxlinux_kernelMatch2.6.17rc1
ORlinuxlinux_kernelMatch2.6.17rc2
ORlinuxlinux_kernelMatch2.6.17rc3
ORlinuxlinux_kernelMatch2.6.17rc4
ORlinuxlinux_kernelMatch2.6.17rc5
ORlinuxlinux_kernelMatch2.6.17rc6
ORlinuxlinux_kernelMatch2.6.17.1
ORlinuxlinux_kernelMatch2.6.17.2
ORlinuxlinux_kernelMatch2.6.17.3
ORlinuxlinux_kernelMatch2.6.17.4
ORlinuxlinux_kernelMatch2.6.17.5
ORlinuxlinux_kernelMatch2.6.17.6
ORlinuxlinux_kernelMatch2.6.17.7
ORlinuxlinux_kernelMatch2.6.17.8
ORlinuxlinux_kernelMatch2.6.17.9
ORlinuxlinux_kernelMatch2.6.17.10
ORlinuxlinux_kernelMatch2.6.17.11
ORlinuxlinux_kernelMatch2.6.17.12
ORlinuxlinux_kernelMatch2.6.17.13
ORlinuxlinux_kernelMatch2.6.17.14
ORlinuxlinux_kernelMatch2.6.18
ORlinuxlinux_kernelMatch2.6.18rc1
ORlinuxlinux_kernelMatch2.6.18rc2
ORlinuxlinux_kernelMatch2.6.18rc3
ORlinuxlinux_kernelMatch2.6.18rc4
ORlinuxlinux_kernelMatch2.6.18rc5
ORlinuxlinux_kernelMatch2.6.18rc6
ORlinuxlinux_kernelMatch2.6.18rc7
ORlinuxlinux_kernelMatch2.6.18.1
ORlinuxlinux_kernelMatch2.6.18.2
ORlinuxlinux_kernelMatch2.6.18.3
ORlinuxlinux_kernelMatch2.6.18.4
ORlinuxlinux_kernelMatch2.6.18.5
ORlinuxlinux_kernelMatch2.6.18.6
ORlinuxlinux_kernelMatch2.6.18.7
ORlinuxlinux_kernelMatch2.6.18.8
ORlinuxlinux_kernelMatch2.6.19
ORlinuxlinux_kernelMatch2.6.19.1
ORlinuxlinux_kernelMatch2.6.19.2
ORlinuxlinux_kernelMatch2.6.19.3
ORlinuxlinux_kernelMatch2.6.19.4
ORlinuxlinux_kernelMatch2.6.19.5
ORlinuxlinux_kernelMatch2.6.19.6
ORlinuxlinux_kernelMatch2.6.19.7
ORlinuxlinux_kernelMatch2.6.20
ORlinuxlinux_kernelMatch2.6.20.1
ORlinuxlinux_kernelMatch2.6.20.2
ORlinuxlinux_kernelMatch2.6.20.3
ORlinuxlinux_kernelMatch2.6.20.4
ORlinuxlinux_kernelMatch2.6.20.5
ORlinuxlinux_kernelMatch2.6.20.6
ORlinuxlinux_kernelMatch2.6.20.7
ORlinuxlinux_kernelMatch2.6.20.8
ORlinuxlinux_kernelMatch2.6.20.9
ORlinuxlinux_kernelMatch2.6.20.10
ORlinuxlinux_kernelMatch2.6.20.11
ORlinuxlinux_kernelMatch2.6.20.12
ORlinuxlinux_kernelMatch2.6.20.13
ORlinuxlinux_kernelMatch2.6.20.14
ORlinuxlinux_kernelMatch2.6.20.15
ORlinuxlinux_kernelMatch2.6.20.16
ORlinuxlinux_kernelMatch2.6.20.17
ORlinuxlinux_kernelMatch2.6.20.18
ORlinuxlinux_kernelMatch2.6.20.19
ORlinuxlinux_kernelMatch2.6.20.20
ORlinuxlinux_kernelMatch2.6.20.21
ORlinuxlinux_kernelMatch2.6.21
ORlinuxlinux_kernelMatch2.6.21.1
ORlinuxlinux_kernelMatch2.6.21.2
ORlinuxlinux_kernelMatch2.6.21.3
ORlinuxlinux_kernelMatch2.6.21.4
ORlinuxlinux_kernelMatch2.6.21.5
ORlinuxlinux_kernelMatch2.6.21.6
ORlinuxlinux_kernelMatch2.6.21.7
ORlinuxlinux_kernelMatch2.6.22
ORlinuxlinux_kernelMatch2.6.22.1
ORlinuxlinux_kernelMatch2.6.22.2
ORlinuxlinux_kernelMatch2.6.22.3
ORlinuxlinux_kernelMatch2.6.22.4
ORlinuxlinux_kernelMatch2.6.22.5
ORlinuxlinux_kernelMatch2.6.22.6
ORlinuxlinux_kernelMatch2.6.22.7
ORlinuxlinux_kernelMatch2.6.22.8
ORlinuxlinux_kernelMatch2.6.22.9
ORlinuxlinux_kernelMatch2.6.22.10
ORlinuxlinux_kernelMatch2.6.22.11
ORlinuxlinux_kernelMatch2.6.22.12
ORlinuxlinux_kernelMatch2.6.22.13
ORlinuxlinux_kernelMatch2.6.22.14
ORlinuxlinux_kernelMatch2.6.22.15
ORlinuxlinux_kernelMatch2.6.22.16
ORlinuxlinux_kernelMatch2.6.22.17
ORlinuxlinux_kernelMatch2.6.22.18
ORlinuxlinux_kernelMatch2.6.22.19
ORlinuxlinux_kernelMatch2.6.22.20
ORlinuxlinux_kernelMatch2.6.22.21
ORlinuxlinux_kernelMatch2.6.22.22
ORlinuxlinux_kernelMatch2.6.23
ORlinuxlinux_kernelMatch2.6.23rc1
ORlinuxlinux_kernelMatch2.6.23rc2
ORlinuxlinux_kernelMatch2.6.23.1
ORlinuxlinux_kernelMatch2.6.23.2
ORlinuxlinux_kernelMatch2.6.23.3
ORlinuxlinux_kernelMatch2.6.23.4
ORlinuxlinux_kernelMatch2.6.23.5
ORlinuxlinux_kernelMatch2.6.23.6
ORlinuxlinux_kernelMatch2.6.23.7
ORlinuxlinux_kernelMatch2.6.23.8
ORlinuxlinux_kernelMatch2.6.23.9
ORlinuxlinux_kernelMatch2.6.23.10
ORlinuxlinux_kernelMatch2.6.23.11
ORlinuxlinux_kernelMatch2.6.23.12
ORlinuxlinux_kernelMatch2.6.23.13
ORlinuxlinux_kernelMatch2.6.23.14
ORlinuxlinux_kernelMatch2.6.23.15
ORlinuxlinux_kernelMatch2.6.23.16
ORlinuxlinux_kernelMatch2.6.23.17
ORlinuxlinux_kernelMatch2.6.24
ORlinuxlinux_kernelMatch2.6.24rc1
ORlinuxlinux_kernelMatch2.6.24rc2
ORlinuxlinux_kernelMatch2.6.24rc3
ORlinuxlinux_kernelMatch2.6.24rc4
ORlinuxlinux_kernelMatch2.6.24rc5
ORlinuxlinux_kernelMatch2.6.24.1
ORlinuxlinux_kernelMatch2.6.24.2
ORlinuxlinux_kernelMatch2.6.24.3
ORlinuxlinux_kernelMatch2.6.24.4
ORlinuxlinux_kernelMatch2.6.24.5
ORlinuxlinux_kernelMatch2.6.24.6
ORlinuxlinux_kernelMatch2.6.24.7
ORlinuxlinux_kernelMatch2.6.25
ORlinuxlinux_kernelMatch2.6.25.1
ORlinuxlinux_kernelMatch2.6.25.2
ORlinuxlinux_kernelMatch2.6.25.3
ORlinuxlinux_kernelMatch2.6.25.4
ORlinuxlinux_kernelMatch2.6.25.5
ORlinuxlinux_kernelMatch2.6.25.6
ORlinuxlinux_kernelMatch2.6.25.7
ORlinuxlinux_kernelMatch2.6.25.8
ORlinuxlinux_kernelMatch2.6.25.9
ORlinuxlinux_kernelMatch2.6.25.10
ORlinuxlinux_kernelMatch2.6.25.11
ORlinuxlinux_kernelMatch2.6.25.12
ORlinuxlinux_kernelMatch2.6.25.13
ORlinuxlinux_kernelMatch2.6.25.14
ORlinuxlinux_kernelMatch2.6.25.15
ORlinuxlinux_kernelMatch2.6.25.16
ORlinuxlinux_kernelMatch2.6.25.17
ORlinuxlinux_kernelMatch2.6.25.18
ORlinuxlinux_kernelMatch2.6.25.19
ORlinuxlinux_kernelMatch2.6.25.20
ORlinuxlinux_kernelMatch2.6.26
ORlinuxlinux_kernelMatch2.6.26.1
ORlinuxlinux_kernelMatch2.6.26.2
ORlinuxlinux_kernelMatch2.6.26.3
ORlinuxlinux_kernelMatch2.6.26.4
ORlinuxlinux_kernelMatch2.6.26.5
ORlinuxlinux_kernelMatch2.6.26.6
ORlinuxlinux_kernelMatch2.6.26.7
| Vendor | Product | Version | CPE |
|---|---|---|---|
| linux | linux_kernel | * | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| linux | linux_kernel | 2.6.0 | cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:* |
| linux | linux_kernel | 2.6.1 | cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:* |
| linux | linux_kernel | 2.6.2 | cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:* |
| linux | linux_kernel | 2.6.3 | cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:* |
| linux | linux_kernel | 2.6.4 | cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:* |
| linux | linux_kernel | 2.6.5 | cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:* |
| linux | linux_kernel | 2.6.6 | cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:* |
| linux | linux_kernel | 2.6.7 | cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:* |
| linux | linux_kernel | 2.6.8 | cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:* |
References
bugzilla.kernel.org/show_bug.cgi?id=11469
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e550dfb0c2c31b6363aa463a035fc9f8dcaa3c9b
secunia.com/advisories/39033
secunia.com/advisories/43315
www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27
www.openwall.com/lists/oss-security/2010/02/11/1
www.openwall.com/lists/oss-security/2010/03/04/4
www.redhat.com/support/errata/RHSA-2010-0147.html
www.redhat.com/support/errata/RHSA-2010-0161.html
www.securityfocus.com/archive/1/516397/100/0/threaded
www.vmware.com/security/advisories/VMSA-2011-0003.html
bugzilla.redhat.com/show_bug.cgi?id=563781
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10061
Social References
More
Related
prion
prion
Null pointer dereference
2010-03-24 13:34:00
exploitdb
exploitdb
cvelist
cvelist
CVE-2010-0437
2010-03-24 10:00:00
seebug
seebug
Linux Kernel ip6_dst_lookup_tail()函数远程拒绝服务漏洞
2010-03-21 00:00:00
nvd
nvd
CVE-2010-0437
2010-03-24 13:34:34
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:42:50
ubuntucve
ubuntucve
CVE-2010-0437
2010-03-24 00:00:00
nessus
nessus
RHEL 5 : kernel (RHSA-2010:0148)
2013-01-24 00:00:00
RHEL 5 : kernel (RHSA-2010:0149)
2013-01-24 00:00:00
Oracle Linux 5 : kernel (ELSA-2010-0147)
2013-07-12 00:00:00
redhat
redhat
(RHSA-2010:0148) Important: kernel security and bug fix update
2010-03-16 00:00:00
(RHSA-2010:0149) Important: kernel security and bug fix update
2010-03-16 00:00:00
(RHSA-2010:0147) Important: kernel security and bug fix update
2010-03-16 00:00:00
openvas
openvas
CentOS Update for kernel CESA-2010:0147 centos5 i386
2011-08-09 00:00:00
RedHat Update for kernel RHSA-2010:0147-01
2010-03-22 00:00:00
RedHat Update for kernel RHSA-2010:0147-01
2010-03-22 00:00:00
centos
centos
kernel security update
2010-03-18 10:55:12
oraclelinux
oraclelinux
kernel security and bug fix update
2010-03-17 00:00:00
ubuntu
ubuntu
Linux kernel regression
2010-06-04 00:00:00
Linux kernel vulnerabilities
2010-06-03 00:00:00
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
AI Score
7.6
Confidence
High
EPSS
0.056
Percentile
93.3%
Related for CVE-2010-0437