CVE-2010-2495

No fix known EPSS 3%

The pppol2tp_xmit function in drivers/net/pppol2tp.c in the L2TP implementation in the Linux kernel before 2.6.34 does not properly validate certain values associated with an interface, which allows attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via vectors related to a routing change.

Published 2010-09-08 · CVE record · OSV

Products: linux_kernel, canonical ubuntu_linux, suse_linux_enterprise_desktop, suse_linux_enterprise_high_availability_extension, suse_linux_enterprise_server