Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-4160
HistoryJan 07, 2011 - 12:00 p.m.

CVE-2010-4160

2011-01-0712:00:48
CWE-190
[email protected]
web.nvd.nist.gov

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

8.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.1%

JSON

Multiple integer overflows in the (1) pppol2tp_sendmsg function in net/l2tp/l2tp_ppp.c, and the (2) l2tp_ip_sendmsg function in net/l2tp/l2tp_ip.c, in the PPPoL2TP and IPoL2TP implementations in the Linux kernel before 2.6.36.2 allow local users to cause a denial of service (heap memory corruption and panic) or possibly gain privileges via a crafted sendto call.

Affected configurations

NVD
Node
linuxlinux_kernelRange<2.6.36.2
Node
opensuseopensuseMatch11.2
OR
suselinux_enterprise_desktopMatch10sp3
OR
suselinux_enterprise_desktopMatch11sp1
OR
suselinux_enterprise_serverMatch9
OR
suselinux_enterprise_serverMatch10sp3
OR
suselinux_enterprise_serverMatch11sp1
OR
suselinux_enterprise_software_development_kitMatch10sp3

References

Related

seebug 1
cve 1
cvelist 1
prion 1
veracode 1
ubuntucve 1
nessus 16
suse 4
ubuntu 8
openvas 21
redhat 2
securityvulns 1
osv 1
oraclelinux 1
packetstorm 1
seebug
seebug
Linux Kernel l2tp_ip_sendmsg()ε’Œpppol2tp_sendmsg()ε‡½ζ•°ζ•΄ζ•°ζΊ’ε‡ΊζΌζ΄ž
2010-11-17 00:00:00
cve
cve
CVE-2010-4160
2011-01-07 12:00:48
cvelist
cvelist
CVE-2010-4160
2011-01-07 11:00:00
prion
prion
Integer overflow
2011-01-07 12:00:00
veracode
veracode
Privilege Escalation
2020-04-10 00:57:12
ubuntucve
ubuntucve
CVE-2010-4160
2011-01-07 00:00:00
nessus
nessus
SuSE 10 Security Update : the Linux kernel (ZYPP Patch Number 7303)
2011-01-27 00:00:00
SuSE 10 Security Update : the Linux kernel (ZYPP Patch Number 7304)
2012-05-17 00:00:00
Ubuntu 6.06 LTS : linux-source-2.6.15 vulnerabilities (USN-1071-1)
2011-03-01 00:00:00
suse
suse
local privilege escalation in kernel
2011-01-25 15:24:01
potential local privilege escalation in kernel
2011-01-03 15:33:25
local privilege escalation in kernel
2011-01-14 16:35:40
ubuntu
ubuntu
Linux kernel vulnerabilities
2011-02-25 00:00:00
Linux kernel vulnerabilities
2011-02-01 00:00:00
Linux kernel vulnerabilities
2011-02-25 00:00:00
openvas
openvas
Ubuntu Update for linux-source-2.6.15 vulnerabilities USN-1071-1
2011-02-28 00:00:00
Ubuntu: Security Advisory (USN-1071-1)
2011-02-28 00:00:00
SuSE Update for kernel SUSE-SA:2011:002
2011-01-11 00:00:00
redhat
redhat
(RHSA-2011:0330) Important: kernel-rt security and bug fix update
2011-03-10 00:00:00
(RHSA-2011:0007) Important: kernel security and bug fix update
2011-01-11 00:00:00
securityvulns
securityvulns
Linux kernel multiple security vulnerabilities
2011-02-02 00:00:00
osv
osv
linux-2.6 - several issues
2010-11-26 00:00:00
oraclelinux
oraclelinux
kernel security and bug fix update
2011-02-12 00:00:00
packetstorm
packetstorm
Ubuntu Security Notice USN-1202-1
2011-09-14 00:00:00

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

8.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.1%

JSON
Related for NVD:CVE-2010-4160
seebug1cve1cvelist1prion1veracode1ubuntucve1nessus16suse4ubuntu8openvas21redhat2securityvulns1osv1oraclelinux1packetstorm1