CVE

Id
43021  
CVE No.
CVE-2010-0437  
Status
Candidate  
Description
The ip6_dst_lookup_tail function in net/ipv6/ip6_output.c in the Linux kernel before 2.6.27 does not properly handle certain circumstances involving an IPv6 TUN network interface and a large number of neighbors, which allows attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via unknown vectors.  
Phase
Assigned (20100127)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
469225 43021 CVE-2010-0437 BUGTRAQ:20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX  View
469226 43021 CVE-2010-0437 URL:http://www.securityfocus.com/archive/1/archive/1/516397/100/0/threaded  View
469227 43021 CVE-2010-0437 MLIST:[oss-security] 20100211 CVE request - kernel: ip6_dst_lookup_tail() NULL pointer dereference  View
469228 43021 CVE-2010-0437 URL:http://www.openwall.com/lists/oss-security/2010/02/11/1  View
469229 43021 CVE-2010-0437 MLIST:[oss-security] 20100304 Re: CVE request - kernel: ip6_dst_lookup_tail() NULL pointer dereference  View
469230 43021 CVE-2010-0437 URL:http://www.openwall.com/lists/oss-security/2010/03/04/4  View
469231 43021 CVE-2010-0437 CONFIRM:http://bugzilla.kernel.org/show_bug.cgi?id=11469  View
469232 43021 CVE-2010-0437 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=e550dfb0c2c31b6363aa463a035fc9f8dcaa3c9b  View
469233 43021 CVE-2010-0437 CONFIRM:http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27  View
469234 43021 CVE-2010-0437 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=563781  View
469235 43021 CVE-2010-0437 CONFIRM:http://www.vmware.com/security/advisories/VMSA-2011-0003.html  View
469236 43021 CVE-2010-0437 REDHAT:RHSA-2010:0161  View
469237 43021 CVE-2010-0437 URL:http://www.redhat.com/support/errata/RHSA-2010-0161.html  View
469238 43021 CVE-2010-0437 REDHAT:RHSA-2010:0147  View
469239 43021 CVE-2010-0437 URL:http://www.redhat.com/support/errata/RHSA-2010-0147.html  View
469240 43021 CVE-2010-0437 OVAL:oval:org.mitre.oval:def:10061  View
469241 43021 CVE-2010-0437 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10061  View
469242 43021 CVE-2010-0437 SECUNIA:39033  View
469243 43021 CVE-2010-0437 URL:http://secunia.com/advisories/39033  View
469244 43021 CVE-2010-0437 SECUNIA:43315  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38027 JVNDB-2010-003812 Asterisk Open Source におけるサービス運用妨害 (DoS) の脆弱性 Asterisk Open Source および Business Edition には、サービス運用妨害 (デーモンクラッシュ) 状態となる脆弱性が存在します。 CVE-2010-0441 43021 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003812.html  View