Back to feed
EUVD-2010-3828 · Published Dec 30, 2010
The econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a sendmsg call that specifies a NULL value for the remote address field.
Technologies
Suse Linux Enterprise ServerSuse Linux Enterprise DesktopDebian Debian LinuxSuse Linux Enterprise Software Development KitCanonical Ubuntu LinuxLinux Linux KernelSuse Linux Enterprise Real Time Extension
Weaknesses
CWE-476
CVSS scores
- v2.04.7
AV:L/AC:M/Au:N/C:N/I:N/A:C
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Privilege Escalation
References
- http://archives.neohapsis.com/archives/fulldisclosure/2010-12/0086.html
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fa0e846494792e722d817b9d3d625a4ef4896c96
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html
- http://openwall.com/lists/oss-security/2010/11/30/1
Potentially impacted assets
See if this affects your attack surface
