Rapid7 Vulnerability & Exploit Database

USN-1170-1: Linux kernel vulnerabilities

Free InsightVM Trial No credit card necessary

Watch Demo See how it all works

Back to Search

USN-1170-1: Linux kernel vulnerabilities

Severity

CVSS

(AV:N/AC:M/Au:N/C:N/I:N/A:C)

Published

01/10/2011

Created

07/25/2018

Added

05/06/2013

Modified

07/09/2020

Description

Race condition in the sctp_icmp_proto_unreachable function in net/sctp/input.c in Linux kernel 2.6.11-rc2 through 2.6.33 allows remote attackers to cause a denial of service (panic) via an ICMP unreachable message to a socket that is already locked by a user, which causes the socket to be freed and triggers list corruption, related to the sctp_wait_for_connect function.

Solution(s)

ubuntu-upgrade-linux-image-2-6-24-29-386
ubuntu-upgrade-linux-image-2-6-24-29-generic
ubuntu-upgrade-linux-image-2-6-24-29-hppa32
ubuntu-upgrade-linux-image-2-6-24-29-hppa64
ubuntu-upgrade-linux-image-2-6-24-29-itanium
ubuntu-upgrade-linux-image-2-6-24-29-lpia
ubuntu-upgrade-linux-image-2-6-24-29-lpiacompat
ubuntu-upgrade-linux-image-2-6-24-29-mckinley
ubuntu-upgrade-linux-image-2-6-24-29-openvz
ubuntu-upgrade-linux-image-2-6-24-29-powerpc
ubuntu-upgrade-linux-image-2-6-24-29-powerpc-smp
ubuntu-upgrade-linux-image-2-6-24-29-powerpc64-smp
ubuntu-upgrade-linux-image-2-6-24-29-rt
ubuntu-upgrade-linux-image-2-6-24-29-server
ubuntu-upgrade-linux-image-2-6-24-29-sparc64
ubuntu-upgrade-linux-image-2-6-24-29-sparc64-smp
ubuntu-upgrade-linux-image-2-6-24-29-virtual
ubuntu-upgrade-linux-image-2-6-24-29-xen

References

https://attackerkb.com/topics/cve-2010-4076
45029
45059
45661
46878
47343
47534
47535
47791
47843
CVE - 2010-4076
CVE - 2010-4077
CVE - 2010-4247
CVE - 2010-4526
CVE - 2011-0726
CVE - 2011-1163
CVE - 2011-1577
CVE - 2011-1745
CVE - 2011-1746
CVE - 2011-2022
Category I
V0030545
V0031252
2011-A-0147
2012-A-0020
RHSA-2010:0958
RHSA-2011:0004
RHSA-2011:0007
RHSA-2011:0163
RHSA-2011:0833
RHSA-2011:0927
USN-1170-1
64616
66773

Advanced vulnerability management analytics and reporting.

Key Features

Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;