Vulnetix
Try Vulnetix Request Demo
CVE-2010-2954 PUBLISHED CVSS 4.900000095367432 MEDIUM

The irda_bind function in net/irda/af_irda.c in the Linux kernel before 2.6.36-rc3-next-20100901 does not properly handle failure of the irda_open_tsap function, which allows local users to cause a denial of service (NULL pointer dereference and panic) and possibly have unspecified other impact via multiple unsuccessful calls to bind on an AF_IRDA (aka PF_IRDA) socket.

EPSS 0.13% · 32.0th percentile

Risk Scores

CVSS v2.0
4.900000095367432
EPSS Score
0.13%
32.0th percentile

Affected Products

VendorProductVersions
n/an/an/a
canonicalubuntu_linux8.04, 6.06, 9.04
linuxlinux_kernel2.6.36, 2.6.36, 2.6.36
opensuseopensuse11.3
suselinux_enterprise_server11, 11
suselinux_enterprise_desktop11, 11

Timeline

References

Open in Interactive Console →