CVE-2010-4342

Linux Kernel < 2.6.37 - Denial of Service via Econet AUN Packet Handling

Title source: llm

Description

The aun_incoming function in net/econet/af_econet.c in the Linux kernel before 2.6.37-rc6, when Econet is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) by sending an Acorn Universal Networking (AUN) packet over UDP.

References (10)

Core 10

Core References

Exploit, Mailing List, Patch, Third Party Advisory mailing-list x_refsource_mlist

http://openwall.com/lists/oss-security/2010/12/09/2

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/45321

Exploit, Third Party Advisory mailing-list x_refsource_mlist

http://marc.info/?l=linux-netdev&m=129185496013580&w=2

Exploit, Mailing List, Third Party Advisory mailing-list x_refsource_mlist

http://openwall.com/lists/oss-security/2010/12/09/1

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2011/0375

Broken Link x_refsource_confirm

http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.37-rc6

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html

Patch x_refsource_confirm

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4e085e76cbe558b79b54cbab772f61185879bc64

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/43291

Exploit, Patch, Third Party Advisory mailing-list x_refsource_mlist

http://marc.info/?l=linux-netdev&m=129186011218615&w=2

Scores

EPSS 0.0169

EPSS Percentile 82.5%

Details

CWE

CWE-476

Status published

Products (3)

linux/linux_kernel 2.6.37 (6 CPE variants)

linux/linux_kernel < 2.6.37

suse/linux_enterprise_server 9

Published Dec 30, 2010

Tracked Since Feb 18, 2026