CVE

Id
43772  
CVE No.
CVE-2010-1188  
Status
Candidate  
Description
Use-after-free vulnerability in net/ipv4/tcp_input.c in the Linux kernel 2.6 before 2.6.20, when IPV6_RECVPKTINFO is set on a listening socket, allows remote attackers to cause a denial of service (kernel panic) via a SYN packet while the socket is in a listening (TCP_LISTEN) state, which is not properly handled and causes the skb structure to be freed.  
Phase
Assigned (20100330)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
476709 43772 CVE-2010-1188 MLIST:[oss-security] 20100329 CVE request: kernel: ipv6: skb is unexpectedly freed (remote DoS)  View
476710 43772 CVE-2010-1188 URL:http://www.openwall.com/lists/oss-security/2010/03/29/1  View
476711 43772 CVE-2010-1188 CONFIRM:http://git.kernel.org/linus/fb7e2399ec17f1004c0e0ccfd17439f8759ede01  View
476712 43772 CVE-2010-1188 CONFIRM:http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20  View
476713 43772 CVE-2010-1188 CONFIRM:http://support.avaya.com/css/P8/documents/100090459  View
476714 43772 CVE-2010-1188 CONFIRM:http://www.vmware.com/security/advisories/VMSA-2011-0009.html  View
476715 43772 CVE-2010-1188 REDHAT:RHSA-2010:0380  View
476716 43772 CVE-2010-1188 URL:http://www.redhat.com/support/errata/RHSA-2010-0380.html  View
476717 43772 CVE-2010-1188 REDHAT:RHSA-2010:0394  View
476718 43772 CVE-2010-1188 URL:http://www.redhat.com/support/errata/RHSA-2010-0394.html  View
476719 43772 CVE-2010-1188 REDHAT:RHSA-2010:0424  View
476720 43772 CVE-2010-1188 URL:http://www.redhat.com/support/errata/RHSA-2010-0424.html  View
476721 43772 CVE-2010-1188 REDHAT:RHSA-2010:0439  View
476722 43772 CVE-2010-1188 URL:http://www.redhat.com/support/errata/RHSA-2010-0439.html  View
476723 43772 CVE-2010-1188 REDHAT:RHSA-2010:0882  View
476724 43772 CVE-2010-1188 URL:http://www.redhat.com/support/errata/RHSA-2010-0882.html  View
476725 43772 CVE-2010-1188 BID:39016  View
476726 43772 CVE-2010-1188 URL:http://www.securityfocus.com/bid/39016  View
476727 43772 CVE-2010-1188 OVAL:oval:org.mitre.oval:def:9878  View
476728 43772 CVE-2010-1188 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9878  View
476729 43772 CVE-2010-1188 SECTRACK:1023992  View
476730 43772 CVE-2010-1188 URL:http://www.securitytracker.com/id?1023992  View
476731 43772 CVE-2010-1188 SECUNIA:39652  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39579 JVNDB-2010-005364 libESMTP における任意の SSL サーバになりすまされる脆弱性 libESMTP は、X.509 証明書のサブジェクトの Common Name (CN) フィールド内のドメイン名の "" キャラクタを適切に処理しないため、任意の SSL サーバになりすまされる脆弱性が存在します。 CVE-2010-1192 43772 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005364.html  View