CVE

Id
47110  
CVE No.
CVE-2010-4526  
Status
Candidate  
Description
Race condition in the sctp_icmp_proto_unreachable function in net/sctp/input.c in Linux kernel 2.6.11-rc2 through 2.6.33 allows remote attackers to cause a denial of service (panic) via an ICMP unreachable message to a socket that is already locked by a user, which causes the socket to be freed and triggers list corruption, related to the sctp_wait_for_connect function.  
Phase
Assigned (20101209)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
515151 47110 CVE-2010-4526 BUGTRAQ:20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console  View
515152 47110 CVE-2010-4526 URL:http://www.securityfocus.com/archive/1/archive/1/520102/100/0/threaded  View
515153 47110 CVE-2010-4526 MLIST:[oss-security] 20110104 CVE-2010-4526 kernel: sctp: a race between ICMP protocol unreachable and connect()  View
515154 47110 CVE-2010-4526 URL:http://www.openwall.com/lists/oss-security/2011/01/04/3  View
515155 47110 CVE-2010-4526 MLIST:[oss-security] 20110104 Re: CVE-2010-4526 kernel: sctp: a race between ICMP protocol unreachable and connect()  View
515156 47110 CVE-2010-4526 URL:http://www.openwall.com/lists/oss-security/2011/01/04/13  View
515157 47110 CVE-2010-4526 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=50b5d6ad63821cea324a5a7a19854d4de1a0a819  View
515158 47110 CVE-2010-4526 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4526  View
515159 47110 CVE-2010-4526 CONFIRM:http://www.vmware.com/security/advisories/VMSA-2011-0012.html  View
515160 47110 CVE-2010-4526 REDHAT:RHSA-2011:0163  View
515161 47110 CVE-2010-4526 URL:http://www.redhat.com/support/errata/RHSA-2011-0163.html  View
515162 47110 CVE-2010-4526 BID:45661  View
515163 47110 CVE-2010-4526 URL:http://www.securityfocus.com/bid/45661  View
515164 47110 CVE-2010-4526 SECUNIA:42964  View
515165 47110 CVE-2010-4526 URL:http://secunia.com/advisories/42964  View
515166 47110 CVE-2010-4526 SECUNIA:46397  View
515167 47110 CVE-2010-4526 URL:http://secunia.com/advisories/46397  View
515168 47110 CVE-2010-4526 VUPEN:ADV-2011-0169  View
515169 47110 CVE-2010-4526 URL:http://www.vupen.com/english/advisories/2011/0169  View
515170 47110 CVE-2010-4526 XF:kernel-icmp-message-dos(64616)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33675 JVNDB-2011-003917 PCSC-Lite などの製品で使用される USB CCID ドライバの libccid における任意のコードを実行される脆弱性 PCSC-Lite などの製品で使用される USB Chip/Smart Card Interface Devices (CCID) ドライバの libccid の ccid_serial.c は、符号化エラーが発生するため、任意のコードを実行される脆弱性が存在します。 CVE-2010-4530 47110 4.4 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003917.html  View