CVE-2010-4164 PUBLISHED CVSS 8.699999809265137 HIGH

Multiple integer underflows in the x25_parse_facilities function in net/x25/x25_facilities.c in the Linux kernel before 2.6.36.2 allow remote attackers to cause a denial of service (system crash) via malformed X.25 (1) X25_FAC_CLASS_A, (2) X25_FAC_CLASS_B, (3) X25_FAC_CLASS_C, or (4) X25_FAC_CLASS_D facility data, a different vulnerability than CVE-2010-3873.

EPSS 2.00% · 83.5th percentile

Risk Scores

CVSS v4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS Score
2.00%
83.5th percentile

Affected Products

VendorProductVersions
suselinux_enterprise_software_development_kit10
linuxlinux_kernel0
suselinux_enterprise_desktop10, 11
opensuseopensuse11.3, 11.2
n/an/an/a
suselinux_enterprise_real_time_extension11
debiandebian_linux5.0
suselinux_enterprise_server10, 11, 9

Timeline

References

…and 5 more

Open in Interactive Console →