The do_tcp_setsockopt function in net/ipv4/tcp.c in the Linux kernel before 2.6.37-rc2 does not properly restrict TCP_MAXSEG (aka MSS) values, which allows local users to cause a denial of service (OOPS) via a setsockopt call that specifies a small value, leading to a divide-by-zero error or incorrect use of a signed integer.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Nov 20, 2010 |
| Suse | — | Upgrade kernel-xenUpgrade kernel-xen-baseUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-xen-develUpgrade kernel-ppc64Upgrade kernel-ppc64-develUpgrade kernel-traceUpgrade kernel-pae-baseUpgrade kernel-docsUpgrade kernel-trace-develUpgrade kernel-pae-develUpgrade kernel-symsUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-ppc64-baseUpgrade kernel-default-manUpgrade kernel-paeUpgrade kernel-trace-base | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-28-sparc64Upgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.32-28-virtualUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.35-25-omapUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.32-28-powerpc-smpUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.32-28-genericUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.32-28-versatileUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.32-28-powerpcUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.32-28-lpiaUpgrade linux-image-2.6.35-25-powerpc-smpUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.32-28-ia64Upgrade linux-image-2.6.32-312-ec2Upgrade linux-image-2.6.35-25-powerpcUpgrade linux-image-2.6.35-25-versatileUpgrade linux-image-2.6.32-28-preemptUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.32-28-386Upgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.32-28-generic-paeUpgrade linux-image-2.6.32-28-sparc64-smpUpgrade linux-image-2.6.35-25-powerpc64-smpUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.31-22-386 | Nov 8, 2024 | Nov 22, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub