CVE-2010-4342

Опубликовано: 30 дек. 2010

Источник: nvd

CVSS2: 7.1

EPSS Низкий

Описание

The aun_incoming function in net/econet/af_econet.c in the Linux kernel before 2.6.37-rc6, when Econet is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) by sending an Acorn Universal Networking (AUN) packet over UDP.

Ссылки

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4e085e76cbe558b79b54cbab772f61185879bc64
http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html
Mailing List
Third Party Advisory
http://marc.info/?l=linux-netdev&m=129185496013580&w=2
Exploit
Third Party Advisory
http://marc.info/?l=linux-netdev&m=129186011218615&w=2
Exploit
Patch
Third Party Advisory
http://openwall.com/lists/oss-security/2010/12/09/1
Exploit
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2010/12/09/2
Exploit
Mailing List
Patch
Third Party Advisory
http://secunia.com/advisories/43291
Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.37-rc6
Broken Link
http://www.securityfocus.com/bid/45321
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2011/0375
Third Party Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4e085e76cbe558b79b54cbab772f61185879bc64
http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html
Mailing List
Third Party Advisory
http://marc.info/?l=linux-netdev&m=129185496013580&w=2
Exploit
Third Party Advisory
http://marc.info/?l=linux-netdev&m=129186011218615&w=2
Exploit
Patch
Third Party Advisory
http://openwall.com/lists/oss-security/2010/12/09/1
Exploit
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2010/12/09/2
Exploit
Mailing List
Patch
Third Party Advisory
http://secunia.com/advisories/43291
Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.37-rc6
Broken Link
http://www.securityfocus.com/bid/45321
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2011/0375
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 2.6.37 (исключая)

cpe:2.3:o:linux:linux_kernel:2.6.37:-:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:2.6.37:rc1:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:2.6.37:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:2.6.37:rc3:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:2.6.37:rc4:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:2.6.37:rc5:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*

EPSS

Процентиль: 82%

0.01687

Низкий

7.1 High

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVE-2010-4342

ubuntu

около 15 лет назад

CVE-2010-4342

debian

около 15 лет назад

The aun_incoming function in net/econet/af_econet.c in the Linux kerne ...

GHSA-m73j-97v7-6695

github

больше 3 лет назад

SUSE-SU-2015:0652-1

suse-cvrf

почти 14 лет назад

Security update for Kernel

EPSS

Процентиль: 82%

0.01687

Низкий

7.1 High

CVSS2

Дефекты

CWE-476