// For flags

CVE-2010-0410

kernel: OOM/crash in drivers/connector

Severity Score

4.9
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memory consumption and system crash) by sending the kernel many NETLINK_CONNECTOR messages.

drivers/connector/connector.c en el Kernel de Linux anterior a la v2.6.32.8 permite a usuarios locales provocar una denegación de servicio (consumo de memoria y caída del sistema) enviando muchos mensajes NETLINK_CONNECTOR al Kernel.

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
None
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2010-01-27 CVE Reserved
  • 2010-02-15 CVE Published
  • 2023-03-08 EPSS Updated
  • 2024-08-07 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-399: Resource Management Errors
CAPEC
References (32)
URL Tag Source
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f98bfbd78c37c5946cc53089da32a5f741efdeb7 X_refsource_confirm
http://secunia.com/advisories/38492 Third Party Advisory
http://secunia.com/advisories/38557 Third Party Advisory
http://secunia.com/advisories/38779 Third Party Advisory
http://secunia.com/advisories/38922 Third Party Advisory
http://secunia.com/advisories/39033 Third Party Advisory
http://secunia.com/advisories/39649 Third Party Advisory
http://secunia.com/advisories/39742 Third Party Advisory
http://secunia.com/advisories/43315 Third Party Advisory
http://support.avaya.com/css/P8/documents/100088287 Third Party Advisory
http://www.openwall.com/lists/oss-security/2010/02/03/1 Mailing List
http://www.openwall.com/lists/oss-security/2010/02/03/3 Mailing List
http://www.securityfocus.com/archive/1/516397/100/0/threaded Mailing List
http://www.securityfocus.com/bid/38058 Third Party Advisory
http://www.vmware.com/security/advisories/VMSA-2011-0003.html Third Party Advisory
http://www.vupen.com/english/advisories/2010/0638 Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10903 Signature
URL Date SRC
URL Date SRC
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.8 2023-02-13
URL Date SRC
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035070.html 2023-02-13
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035159.html 2023-02-13
http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html 2023-02-13
http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00006.html 2023-02-13
http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00007.html 2023-02-13
http://www.debian.org/security/2010/dsa-1996 2023-02-13
http://www.debian.org/security/2010/dsa-2005 2023-02-13
http://www.mandriva.com/security/advisories?name=MDVSA-2010:088 2023-02-13
http://www.novell.com/linux/security/advisories/2010_23_kernel.html 2023-02-13
http://www.redhat.com/support/errata/RHSA-2010-0161.html 2023-02-13
http://www.redhat.com/support/errata/RHSA-2010-0398.html 2023-02-13
http://www.ubuntu.com/usn/USN-914-1 2023-02-13
https://bugzilla.redhat.com/show_bug.cgi?id=561682 2010-05-06
https://access.redhat.com/security/cve/CVE-2010-0410 2010-05-06
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 < 2.6.32.8
Search vendor "Linux" for product "Linux Kernel" and version " < 2.6.32.8"
-
Affected
Debian
Search vendor "Debian"
 Debian Linux
Search vendor "Debian" for product "Debian Linux"
 4.0
Search vendor "Debian" for product "Debian Linux" and version "4.0"
-
Affected
Debian
Search vendor "Debian"
 Debian Linux
Search vendor "Debian" for product "Debian Linux"
 5.0
Search vendor "Debian" for product "Debian Linux" and version "5.0"
-
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 6.06
Search vendor "Canonical" for product "Ubuntu Linux" and version "6.06"
lts
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 8.04
Search vendor "Canonical" for product "Ubuntu Linux" and version "8.04"
lts
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 8.10
Search vendor "Canonical" for product "Ubuntu Linux" and version "8.10"
-
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 9.04
Search vendor "Canonical" for product "Ubuntu Linux" and version "9.04"
-
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 9.10
Search vendor "Canonical" for product "Ubuntu Linux" and version "9.10"
-
Affected