1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
|
PublicDateAtUSN: 2010-03-31
Candidate: CVE-2010-1188
PublicDate: 2010-03-31
References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1188
http://www.openwall.com/lists/oss-security/2010/03/29/1
http://www.ubuntu.com/usn/usn-947-1
Description:
Use-after-free vulnerability in net/ipv4/tcp_input.c in the Linux kernel
2.6 before 2.6.20, when IPV6_RECVPKTINFO is set on a listening socket,
allows remote attackers to cause a denial of service (kernel panic) via a
SYN packet while the socket is in a listening (TCP_LISTEN) state, which is
not properly handled and causes the skb structure to be freed.
Ubuntu-Description:
Notes:
Bugs:
Priority: medium
Discovered-by:
Assigned-to:
Patches_linux-source-2.6.15:
upstream: http://git.kernel.org/linus/fb7e2399ec17f1004c0e0ccfd17439f8759ede01
upstream_linux-source-2.6.15: not-affected
dapper_linux-source-2.6.15: released (2.6.15-55.84)
hardy_linux-source-2.6.15: DNE
intrepid_linux-source-2.6.15: DNE
jaunty_linux-source-2.6.15: DNE
karmic_linux-source-2.6.15: DNE
lucid_linux-source-2.6.15: DNE
devel_linux-source-2.6.15: DNE
Patches_linux:
upstream_linux: not-affected
dapper_linux: DNE
hardy_linux: not-affected
intrepid_linux: not-affected
jaunty_linux: not-affected
karmic_linux: not-affected
lucid_linux: not-affected
devel_linux: not-affected
|