Linux Kernel Unix socket backlog local DoS Vulnerability

Source: Internet
Author: User

Vulnerability title Linux kernel Unix socket backlog Local Denial of Service Vulnerability

Moderate hazard level

Public for the first time? No

Release date:

Cause of vulnerability design error

Affected Product Version

Linux kernel 2.6.x

Vulnerability description Linux is an open-source operating system. In the implementation of Linux Kernel net/core/sock. c socket, the backlog of received packets cannot be correctly managed. Remote attackers can exploit this vulnerability to send a large number of packets to initiate DoS attacks.

Cve id: CVE-2010-4805

Http://kerneltrap.org/mailarchive/linux-netdev/2010/3/3/6271093/thread http://www.securityfocus.com/bid/46637

No verification information

Vulnerability solution users can refer to the following vendors to obtain the Security Bulletin patch information: http://git.kernel.org /? P = linux/kernel/git/torvalds/linux-2.6.git; a = commit; h = c377411f2494a931ff7facdbb3a6839b1266bcf6

Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.