CVE-2010-2495 | Vulnetix

CVE-2010-2495 PUBLISHED CVSS 8.699999809265137 HIGH

The pppol2tp_xmit function in drivers/net/pppol2tp.c in the L2TP implementation in the Linux kernel before 2.6.34 does not properly validate certain values associated with an interface, which allows attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via vectors related to a routing change.

EPSS 2.93% · 86.6th percentile

Risk Scores

CVSS 4.0

8.699999809265137

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

EPSS Score

2.93%

86.6th percentile

Affected Products

Vendor	Product	Versions
suse	suse_linux_enterprise_server	11
linux	linux_kernel	0
canonical	ubuntu_linux	8.04, 9.04, 10.10
suse	suse_linux_enterprise_desktop	11
n/a	n/a	*
suse	suse_linux_enterprise_high_availability_extension	11

Timeline

Sep 8, 2010 CVE Published
Feb 4, 2022 EPSS Score
Mar 29, 2022 EPSS Score
May 21, 2022 EPSS Score
Jul 13, 2022 EPSS Score
Oct 27, 2022 EPSS Score
Dec 19, 2022 EPSS Score
Feb 10, 2023 EPSS Score
Apr 4, 2023 EPSS Score
May 27, 2023 EPSS Score
Jul 19, 2023 EPSS Score
Sep 10, 2023 EPSS Score

References

Open in Interactive Console →