The ip6_dst_lookup_tail function in net/ipv6/ip6_output.c in the Linux kernel before 2.6.27 does not properly handle certain circumstances involving an IPv6 TUN network interface and a large number of neighbors, which allows attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via unknown vectors.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| MRG for RHEL-5 | |||
| kernel-rt-0:2.6.24.7-149.el5rt | cpe:/a:redhat:enterprise_mrg:1::el5 | RHSA-2010:0161 | 2010-03-23T00:00:00Z |
| Red Hat Enterprise Linux 5 | |||
| kernel-0:2.6.18-164.15.1.el5 | cpe:/o:redhat:enterprise_linux:5 | RHSA-2010:0147 | 2010-03-17T00:00:00Z |
| Red Hat Enterprise Linux 5.2 Z Stream | |||
| kernel-0:2.6.18-92.1.38.el5 | cpe:/o:redhat:rhel_eus:5.2 | RHSA-2010:0148 | 2010-03-17T00:00:00Z |
| Red Hat Enterprise Linux 5.3.Z - Server Only | |||
| kernel-0:2.6.18-128.14.1.el5 | cpe:/o:redhat:rhel_eus:5.3 | RHSA-2010:0149 | 2010-03-17T00:00:00Z |
No data.
Project Subscriptions
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2010-0468 | The ip6_dst_lookup_tail function in net/ipv6/ip6_output.c in the Linux kernel before 2.6.27 does not properly handle certain circumstances involving an IPv6 TUN network interface and a large number of neighbors, which allows attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via unknown vectors. |
 Ubuntu USN |
USN-947-1 | Linux kernel vulnerabilities |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-08-07T00:52:17.346Z
Reserved: 2010-01-27T00:00:00.000Z
Link: CVE-2010-0437
Vulnrichment
No data.
NVD
Status : Deferred
Published: 2010-03-24T13:34:34.280
Modified: 2025-04-11T00:51:21.963
Link: CVE-2010-0437
Redhat
OpenCVE Enrichment
No data.
Weaknesses