CVE

Id
46835  
CVE No.
CVE-2010-4251  
Status
Candidate  
Description
The socket implementation in net/core/sock.c in the Linux kernel before 2.6.34 does not properly manage a backlog of received packets, which allows remote attackers to cause a denial of service (memory consumption) by sending a large amount of network traffic, as demonstrated by netperf UDP tests.  
Phase
Assigned (20101116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
511798 46835 CVE-2010-4251 BUGTRAQ:20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console  View
511799 46835 CVE-2010-4251 URL:http://www.securityfocus.com/archive/1/archive/1/520102/100/0/threaded  View
511800 46835 CVE-2010-4251 MLIST:[netdev] 20100302 [PATCH 1/8] net: add limit for socket backlog  View
511801 46835 CVE-2010-4251 URL:http://kerneltrap.org/mailarchive/linux-netdev/2010/3/3/6271093/thread  View
511802 46835 CVE-2010-4251 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=8eae939f1400326b06d0c9afe53d2a484a326871  View
511803 46835 CVE-2010-4251 CONFIRM:http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34  View
511804 46835 CVE-2010-4251 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=657303  View
511805 46835 CVE-2010-4251 CONFIRM:http://www.vmware.com/security/advisories/VMSA-2011-0012.html  View
511806 46835 CVE-2010-4251 BID:46637  View
511807 46835 CVE-2010-4251 URL:http://www.securityfocus.com/bid/46637  View
511808 46835 CVE-2010-4251 SECUNIA:46397  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30792 JVNDB-2011-001031 Xen の fixup_page_fault 関数におけるサービス運用妨害 (DoS) の脆弱性 Xen の arch/x86/traps.c 内にある fixup_page_fault 関数は、準仮想化処理が動作している際、カーネルモードから handle_gdt_ldt_mapping_fault 関数の呼び出しが正常に行われているか検証しないため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-4255 46835 6.1 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001031.html  View