Security Advisory

CVE-2010-2495

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2010-09-08 19:00:00
Last updated 2024-08-07 02:32:16
Assigner redhat
CVSS score not scored
State PUBLISHED

Description

The pppol2tp_xmit function in drivers/net/pppol2tp.c in the L2TP implementation in the Linux kernel before 2.6.34 does not properly validate certain values associated with an interface, which allows attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via vectors related to a routing change.