CVE-2010-4160 — Vulnetix

CVE-2010-4160 PUBLISHED

Reported by redhat · Published January 7, 2011

Multiple integer overflows in the (1) pppol2tp_sendmsg function in net/l2tp/l2tp_ppp.c, and the (2) l2tp_ip_sendmsg function in net/l2tp/l2tp_ip.c, in the PPPoL2TP and IPoL2TP implementations in the Linux kernel before 2.6.36.2 allow local users to cause a denial of service (heap memory corruption and panic) or possibly gain privileges via a crafted sendto call.

Affected Products

Vendor	Product	Versions
n/a	n/a	n/a
n/a	n/a	n/a, n/a

Exploit Intelligence

http://xorl.wordpress.com/2010/11/11/cve-2010-4160-linux-kernel-l2tp-integer-overflows/ (nist-nvd)

Timeline

Jan 7, 2011 CVE Published
Feb 4, 2022 EPSS Score
Mar 29, 2022 EPSS Score
May 20, 2022 EPSS Score
Jul 12, 2022 EPSS Score
Sep 4, 2022 EPSS Score
Oct 26, 2022 EPSS Score
Dec 18, 2022 EPSS Score
Feb 9, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Apr 2, 2023 EPSS Score
May 25, 2023 EPSS Score

References

43056 third-party-advisoryx_refsource_SECUNIA
SUSE-SA:2011:004 vendor-advisoryx_refsource_SUSE
42801 third-party-advisoryx_refsource_SECUNIA
SUSE-SA:2011:002 vendor-advisoryx_refsource_SUSE
[oss-security] 20101124 Re: CVE request: kernel: L2TP send buffer allocation size overflows mailing-listx_refsource_MLIST
42932 third-party-advisoryx_refsource_SECUNIA
RHSA-2011:0007 vendor-advisoryx_refsource_REDHAT
ADV-2011-0124 vdb-entryx_refsource_VUPEN
[netdev] 20101031 [SECURITY] L2TP send buffer allocation size overflows mailing-listx_refsource_MLIST
x_refsource_CONFIRM
[oss-security] 20101124 Re: CVE request: kernel: L2TP send buffer allocation size overflows mailing-listx_refsource_MLIST
x_refsource_CONFIRM
SUSE-SA:2011:005 vendor-advisoryx_refsource_SUSE
ADV-2011-0375 vdb-entryx_refsource_VUPEN
42890 third-party-advisoryx_refsource_SECUNIA
ADV-2011-0012 vdb-entryx_refsource_VUPEN
x_refsource_CONFIRM
44762 vdb-entryx_refsource_BID
[oss-security] 20101124 Re: CVE request: kernel: L2TP send buffer allocation size overflows mailing-listx_refsource_MLIST
SUSE-SA:2011:008 vendor-advisoryx_refsource_SUSE

…and 8 more

Open in Interactive Console →