Bug 312485

Summary:	Kernel: TIPC AF_TIPC DoS (CVE-2010-1187)
Product:	Gentoo Security	Reporter:	Alex Legler (RETIRED) <a3li>
Component:	Kernel	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://bugzilla.redhat.com/show_bug.cgi?id=578057
Whiteboard:	[linux >= 2.6.16-rc1] [linux <= 2.6.33]
Package list:		Runtime testing required:	---

Description Alex Legler (RETIRED) archtester

2010-03-31 19:41:57 UTC

CVE-2010-1187 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-1187):
  The Transparent Inter-Process Communication (TIPC) functionality in
  Linux kernel 2.6.33, and possibly other versions, allows local users
  to cause a denial of service (kernel OOPS) by sending datagrams
  through AF_TIPC before entering network mode, which triggers a NULL
  pointer dereference.