CVE-2010-4342

Published: Dec 30, 2010Modified: Apr 29, 2026

7.1

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Exploitability: 8.6 / Impact: 6.9

Source: NVD

Description

The aun_incoming function in net/econet/af_econet.c in the Linux kernel before 2.6.37-rc6, when Econet is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) by sending an Acorn Universal Networking (AUN) packet over UDP.

Affected (8)

Products: Linux: Linux Kernel · Suse: Linux Enterprise Server

1 product

1 product

Linux Enterprise Server

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 2.6.37
Linux Linux Kernel	Version 2.6.37
Linux Linux Kernel	Version 2.6.37 rc1
Linux Linux Kernel	Version 2.6.37 rc2
Linux Linux Kernel	Version 2.6.37 rc3
Linux Linux Kernel	Version 2.6.37 rc4
Linux Linux Kernel	Version 2.6.37 rc5

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Suse Linux Enterprise Server	Version 9

Related CWEs

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (20)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4e085e76cbe558b79b54cbab772f61185879bc64

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://marc.info/?l=linux-netdev&m=129185496013580&w=2

Source: secalert@redhat.com

ExploitThird Party Advisory

http://marc.info/?l=linux-netdev&m=129186011218615&w=2

Source: secalert@redhat.com

ExploitPatchThird Party Advisory

http://openwall.com/lists/oss-security/2010/12/09/1

Source: secalert@redhat.com

ExploitMailing ListThird Party Advisory

http://openwall.com/lists/oss-security/2010/12/09/2

Source: secalert@redhat.com

ExploitMailing ListPatchThird Party Advisory

http://secunia.com/advisories/43291

Source: secalert@redhat.com

Third Party Advisory

http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.37-rc6

Source: secalert@redhat.com

Broken Link

http://www.securityfocus.com/bid/45321

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.vupen.com/english/advisories/2011/0375

Source: secalert@redhat.com

Third Party Advisory

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4e085e76cbe558b79b54cbab772f61185879bc64

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://marc.info/?l=linux-netdev&m=129185496013580&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

http://marc.info/?l=linux-netdev&m=129186011218615&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchThird Party Advisory

http://openwall.com/lists/oss-security/2010/12/09/1

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitMailing ListThird Party Advisory

http://openwall.com/lists/oss-security/2010/12/09/2

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitMailing ListPatchThird Party Advisory

http://secunia.com/advisories/43291

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.37-rc6

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.securityfocus.com/bid/45321

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.vupen.com/english/advisories/2011/0375

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.