Linux Kernel "AF_ECONET" Protocol NULL pointer reference Denial of Service Vulnerability

Release date:
Updated on:

Affected Systems:
Linux kernel 2.6.11.11-2.6.37
Description:
--------------------------------------------------------------------------------
Bugtraq id: 45321
Cve id: CVE-2010-4342

Linux Kernel is the Kernel used by open source Linux.

Linux Kernel has Implementation Vulnerabilities. Attackers can exploit these vulnerabilities to cause a Kernel crash, DOS legitimate users, and execute arbitrary code.

This vulnerability is caused by a null pointer reference in the econet AUN-over-UDP receiving path.

<* Source: Nelson Elhage (nelhage@mit.edu)

Link: http://marc.info /? L = linux-netdev & m = 129185496013580 & w = 2

*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Linux
-----
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://www.kernel.org/