The do_tcp_setsockopt function in net/ipv4/tcp.c in the Linux kernel before 2.6.37-rc2 does not properly restrict TCP_MAXSEG (aka MSS) values, which allows local users to cause a denial of service (OOPS) via a setsockopt call that specifies a small value, leading to a divide-by-zero error or incorrect use of a signed integer.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Nov 20, 2010 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-defaultUpgrade kernel-symsUpgrade kernel-pae-baseUpgrade kernel-paeUpgrade kernel-pae-develUpgrade kernel-ppc64-baseUpgrade kernel-trace-baseUpgrade kernel-default-baseUpgrade kernel-docsUpgrade kernel-trace-develUpgrade kernel-ppc64-develUpgrade kernel-xen-develUpgrade kernel-ppc64Upgrade kernel-traceUpgrade kernel-default-develUpgrade kernel-xenUpgrade kernel-xen-baseUpgrade kernel-source | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.35-25-powerpc64-smpUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.32-28-sparc64-smpUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.32-28-preemptUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.32-28-serverUpgrade linux-image-2.6.32-28-genericUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-28-versatileUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.32-28-powerpcUpgrade linux-image-2.6.35-25-omapUpgrade linux-image-2.6.32-28-ia64Upgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.32-28-lpiaUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.35-25-powerpc-smpUpgrade linux-image-2.6.32-28-powerpc-smpUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.32-28-generic-paeUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.32-28-386Upgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.32-28-sparc64 | Nov 8, 2024 | Nov 22, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub