Linux Kernel Unix socket backlog local DoS Vulnerability

Vulnerability title Linux kernel Unix socket backlog Local Denial of Service Vulnerability

Moderate hazard level

Public for the first time? No

Release date:

Cause of vulnerability design error

Affected Product Version

Linux kernel 2.6.x

Vulnerability description Linux is an open-source operating system. In the implementation of Linux Kernel net/core/sock. c socket, the backlog of received packets cannot be correctly managed. Remote attackers can exploit this vulnerability to send a large number of packets to initiate DoS attacks.

Cve id: CVE-2010-4805

Http://kerneltrap.org/mailarchive/linux-netdev/2010/3/3/6271093/thread http://www.securityfocus.com/bid/46637

No verification information

Vulnerability solution users can refer to the following vendors to obtain the Security Bulletin patch information: http://git.kernel.org /? P = linux/kernel/git/torvalds/linux-2.6.git; a = commit; h = c377411f2494a931ff7facdbb3a6839b1266bcf6