Bug 307445

Summary:	Kernel: connector.c NETLINK_CONNECTOR DoS (CVE-2010-0410)
Product:	Gentoo Security	Reporter:	Alex Legler (RETIRED) <a3li>
Component:	Kernel	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	jaak
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.8
Whiteboard:	[linux < 2.6.32.8]
Package list:		Runtime testing required:	---

Description Alex Legler (RETIRED) archtester

2010-03-02 09:39:52 UTC

CVE-2010-0410 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-0410):
  drivers/connector/connector.c in the Linux kernel before 2.6.32.8
  allows local users to cause a denial of service (memory consumption
  and system crash) by sending the kernel many NETLINK_CONNECTOR
  messages.