Rapid7 Vulnerability & Exploit Database

USN-1072-1: Linux kernel vulnerabilities

Free InsightVM Trial No credit card necessary

Watch Demo See how it all works

Back to Search

USN-1072-1: Linux kernel vulnerabilities

Severity

CVSS

(AV:L/AC:M/Au:N/C:C/I:C/A:C)

Published

09/30/2010

Created

07/25/2018

Added

05/06/2013

Modified

08/17/2020

Description

Multiple integer overflows in the (1) pppol2tp_sendmsg function in net/l2tp/l2tp_ppp.c, and the (2) l2tp_ip_sendmsg function in net/l2tp/l2tp_ip.c, in the PPPoL2TP and IPoL2TP implementations in the Linux kernel before 2.6.36.2 allow local users to cause a denial of service (heap memory corruption and panic) or possibly gain privileges via a crafted sendto call.

Solution(s)

ubuntu-upgrade-linux-image-2-6-24-28-386
ubuntu-upgrade-linux-image-2-6-24-28-generic
ubuntu-upgrade-linux-image-2-6-24-28-hppa32
ubuntu-upgrade-linux-image-2-6-24-28-hppa64
ubuntu-upgrade-linux-image-2-6-24-28-itanium
ubuntu-upgrade-linux-image-2-6-24-28-lpia
ubuntu-upgrade-linux-image-2-6-24-28-lpiacompat
ubuntu-upgrade-linux-image-2-6-24-28-mckinley
ubuntu-upgrade-linux-image-2-6-24-28-openvz
ubuntu-upgrade-linux-image-2-6-24-28-powerpc
ubuntu-upgrade-linux-image-2-6-24-28-powerpc-smp
ubuntu-upgrade-linux-image-2-6-24-28-powerpc64-smp
ubuntu-upgrade-linux-image-2-6-24-28-rt
ubuntu-upgrade-linux-image-2-6-24-28-server
ubuntu-upgrade-linux-image-2-6-24-28-sparc64
ubuntu-upgrade-linux-image-2-6-24-28-sparc64-smp
ubuntu-upgrade-linux-image-2-6-24-28-virtual
ubuntu-upgrade-linux-image-2-6-24-28-xen

References

https://attackerkb.com/topics/cve-2010-0435
42527
43221
43229
43809
43810
44301
44354
44500
44630
44648
44665
44762
45028
45039
45054
45058
45062
45063
45074
CVE - 2010-0435
CVE - 2010-2943
CVE - 2010-3296
CVE - 2010-3297
CVE - 2010-3448
CVE - 2010-3698
CVE - 2010-3699
CVE - 2010-3858
CVE - 2010-3859
CVE - 2010-3873
CVE - 2010-3875
CVE - 2010-3876
CVE - 2010-3877
CVE - 2010-3880
CVE - 2010-4072
CVE - 2010-4074
CVE - 2010-4078
CVE - 2010-4079
CVE - 2010-4080
CVE - 2010-4081
CVE - 2010-4083
CVE - 2010-4157
CVE - 2010-4160
CVE - 2010-4248
DSA-2126
Category I
V0030545
2011-A-0147
RHSA-2010:0622
RHSA-2010:0627
RHSA-2010:0723
RHSA-2010:0771
RHSA-2010:0842
RHSA-2010:0898
RHSA-2010:0958
RHSA-2011:0004
RHSA-2011:0007
RHSA-2011:0017
RHSA-2011:0162
SUSE-SA:2010:050
SUSE-SA:2010:052
SUSE-SA:2010:060
SUSE-SA:2011:001
SUSE-SA:2011:002
SUSE-SA:2011:004
SUSE-SA:2011:005
SUSE-SA:2011:007
SUSE-SA:2011:008
USN-1072-1
64578
64580

Advanced vulnerability management analytics and reporting.

Key Features

Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;