CVE-2010-4526 in Linux Kernel
Résumé (Anglaise)
Race condition in the sctp_icmp_proto_unreachable function in net/sctp/input.c in Linux kernel 2.6.11-rc2 through 2.6.33 allows remote attackers to cause a denial of service (panic) via an ICMP unreachable message to a socket that is already locked by a user, which causes the socket to be freed and triggers list corruption, related to the sctp_wait_for_connect function.
Réserver
09/12/2010
Divulgation
10/01/2011
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 56006 | Linux Kernel sctp_icmp_proto_unreachable race condition | 362 | Non défini | Correctif officiel | CVE-2010-4526 |