CVE-2010-0437

kernel: ipv6: fix ip6_dst_lookup_tail() NULL pointer dereference

Published Mar 24, 2010 CVSS 2.0 · 7.8 High EPSS 12.3% KEV · Not listed
Description
The ip6_dst_lookup_tail function in net/ipv6/ip6_output.c in the Linux kernel before 2.6.27 does not properly handle certain circumstances involving an IPv6 TUN network interface and a large number of neighbors, which allows attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via unknown vectors.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2010-0468 The ip6_dst_lookup_tail function in net/ipv6/ip6_output.c in the Linux kernel before 2.6.27 does not properly handle certain circumstances involving an IPv6 TUN network interface and a large number of neighbors, which allows attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via unknown vectors.
Ubuntu USN Ubuntu USN USN-947-1 Linux kernel vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 12:52 AM
Reserved
Jan 27, 2010, 12:00 AM
Status
Modified
Published
Mar 24, 2010, 1:34 PM
Modified
Jun 16, 2026, 11:16 PM
Severity
Important
Public date
Sep 9, 2008, 12:00 AM