Files
CVEs-PoC/2010/CVE-2010-4526.md
T
2024-06-18 02:51:15 +02:00

18 lines
869 B
Markdown

### [CVE-2010-4526](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4526)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%20n%2Fa%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
### Description
Race condition in the sctp_icmp_proto_unreachable function in net/sctp/input.c in Linux kernel 2.6.11-rc2 through 2.6.33 allows remote attackers to cause a denial of service (panic) via an ICMP unreachable message to a socket that is already locked by a user, which causes the socket to be freed and triggers list corruption, related to the sctp_wait_for_connect function.
### POC
#### Reference
- http://www.vmware.com/security/advisories/VMSA-2011-0012.html
#### Github
No PoCs found on GitHub currently.