Evil-DB LogoEvil-DB
← All CVEs

CVE-2010-0437

high · 7.8

The ip6_dst_lookup_tail function in net/ipv6/ip6_output.c in the Linux kernel before 2.6.27 does not properly handle certain circumstances involving an IPv6 TUN network interface and a large number of neighbors, which allows attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via unknown vectors.

7.8
CVSS
12.4%
EPSS (exploit prob.)
96th
EPSS percentile
2010-03-24
Published

AV:N/AC:L/Au:N/C:N/I:N/A:C

Affected products

VendorProductAffected versions
linuxlinux_kernel<= 2.6.26.8
linuxlinux_kernel2.6.0
linuxlinux_kernel2.6.1
linuxlinux_kernel2.6.2
linuxlinux_kernel2.6.3
linuxlinux_kernel2.6.4
linuxlinux_kernel2.6.5
linuxlinux_kernel2.6.6
linuxlinux_kernel2.6.7
linuxlinux_kernel2.6.8
linuxlinux_kernel2.6.8.1
linuxlinux_kernel2.6.9
linuxlinux_kernel2.6.9
linuxlinux_kernel2.6.9
linuxlinux_kernel2.6.9
linuxlinux_kernel2.6.9
linuxlinux_kernel2.6.10
linuxlinux_kernel2.6.11
linuxlinux_kernel2.6.11.1
linuxlinux_kernel2.6.11.2
linuxlinux_kernel2.6.11.3
linuxlinux_kernel2.6.11.4
linuxlinux_kernel2.6.11.5
linuxlinux_kernel2.6.11.6
linuxlinux_kernel2.6.11.7
linuxlinux_kernel2.6.11.8
linuxlinux_kernel2.6.11.9
linuxlinux_kernel2.6.11.10
linuxlinux_kernel2.6.11.11
linuxlinux_kernel2.6.11.12
linuxlinux_kernel2.6.12
linuxlinux_kernel2.6.12.1
linuxlinux_kernel2.6.12.2
linuxlinux_kernel2.6.12.3
linuxlinux_kernel2.6.12.4
linuxlinux_kernel2.6.12.5
linuxlinux_kernel2.6.12.6
linuxlinux_kernel2.6.13
linuxlinux_kernel2.6.13.1
linuxlinux_kernel2.6.13.2

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2010-0437