CVE - CVE-2010-1187

CVE-ID
CVE-2010-1187	Learn more at National Vulnerability Database (NVD) • Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings
Description
The Transparent Inter-Process Communication (TIPC) functionality in Linux kernel 2.6.16-rc1 through 2.6.33, and possibly other versions, allows local users to cause a denial of service (kernel OOPS) by sending datagrams through AF_TIPC before entering network mode, which triggers a NULL pointer dereference.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BUGTRAQ:20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX URL:http://www.securityfocus.com/archive/1/archive/1/516397/100/0/threaded MLIST:[oss-security] 20100330 CVE request: kernel: tipc: Fix oops on send prior to entering networked mode URL:http://www.openwall.com/lists/oss-security/2010/03/30/1 MLIST:[oss-security] 20100331 Re: CVE request: kernel: tipc: Fix oops on send prior to entering networked mode URL:http://www.openwall.com/lists/oss-security/2010/03/31/1 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=578057 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git;a=commitdiff;h=d0021b252eaf65ca07ed14f0d66425dd9ccab9a6;hp=6d55cb91a0020ac0d78edcad61efd6c8cf5785a3 CONFIRM:http://www.vmware.com/security/advisories/VMSA-2011-0003.html DEBIAN:DSA-2053 URL:http://www.debian.org/security/2010/dsa-2053 MANDRIVA:MDVSA-2010:198 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 BID:39120 URL:http://www.securityfocus.com/bid/39120 OVAL:oval:org.mitre.oval:def:9832 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9832 SECUNIA:39830 URL:http://secunia.com/advisories/39830 SECUNIA:43315 URL:http://secunia.com/advisories/43315
Assigning CNA
N/A
Date Entry Created
20100330	Disclaimer: The entry creation date may reflect when the CVE-ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20100330)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE list, which standardizes names for security problems.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org

Common Vulnerabilities and Exposures

CVE-2010-1187