Multiple integer overflows in the (1) pppol2tp_sendmsg function in net/l2tp/l2tp_ppp.c, and the (2) l2tp_ip_sendmsg function in net/l2tp/l2tp_ip.c, in the PPPoL2TP and IPoL2TP implementations in the Linux kernel before 2.6.36.2 allow local users to cause a denial of service (heap memory corruption and panic) or possibly gain privileges via a crafted sendto call.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jan 7, 2011 |
| Suse | — | Upgrade kernel-traceUpgrade kernel-sourceUpgrade kernel-symsUpgrade kernel-ppc64-develUpgrade kernel-ppc64Upgrade kernel-default-develUpgrade kernel-xenUpgrade kernel-paeUpgrade kernel-ppc64-baseUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-pae-develUpgrade kernel-xen-baseUpgrade kernel-trace-baseUpgrade kernel-trace-develUpgrade kernel-default-manUpgrade kernel-pae-baseUpgrade kernel-xen-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.32-28-sparc64-smpUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.32-28-virtualUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.32-28-ia64Upgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.35-25-powerpc-smpUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.32-28-genericUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.32-28-powerpc64-smpUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.35-25-powerpc64-smpUpgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.32-28-sparc64Upgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.32-28-386Upgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.35-25-versatileUpgrade linux-image-2.6.32-312-ec2Upgrade linux-image-2.6.32-28-lpiaUpgrade linux-image-2.6.35-25-powerpcUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.32-28-preemptUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.32-28-powerpcUpgrade linux-image-2.6.32-28-versatileUpgrade linux-image-2.6.35-25-omapUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.32-28-serverUpgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.32-28-powerpc-smpUpgrade linux-image-2.6.32-28-generic-paeUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.24-28-powerpc64-smp | Nov 8, 2024 | Jan 7, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub