Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2010-4263

The igb_receive_skb function in drivers/net/igb/igb_main.c in the Intel Gigabit Ethernet (aka igb) subsystem in the Linux kernel before 2.6.34, when Single Root I/O Virtualization (SR-IOV) and promiscuous mode are enabled but no VLANs are registered, allows remote attackers to cause a denial of service (NULL pointer dereference and panic) and possibly have unspecified other impact via a VLAN tagged frame.

Published

2011-01-18T18:03:07.550

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.9 (HIGH)

CVSSv2 Vector

AV:A/AC:M/Au:N/C:C/I:C/A:C

Access Vector: ADJACENT_NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

5.5

Impact Score

10.0

Weaknesses

Type: Primary
CWE-476

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	linux	linux_kernel	< 2.6.34	Yes
Operating System	vmware	esx	3.0.0	Yes
Operating System	vmware	esx	3.0.1	Yes
Operating System	vmware	esx	3.0.2	Yes
Operating System	vmware	esx	3.0.3	Yes
Operating System	vmware	esx	3.5	Yes
Operating System	vmware	esx	3.5	Yes
Operating System	vmware	esx	3.5	Yes
Operating System	vmware	esx	3.5	Yes
Operating System	vmware	esx	4.0	Yes
Operating System	vmware	esx	4.1	Yes
Operating System	vmware	esxi	3.5	Yes
Operating System	vmware	esxi	3.5	Yes
Operating System	vmware	esxi	4.0	Yes
Operating System	vmware	esxi	4.0	Yes
Operating System	vmware	esxi	4.0	Yes
Operating System	vmware	esxi	4.0	Yes
Operating System	vmware	esxi	4.0	Yes
Operating System	vmware	esxi	4.1	Yes
Operating System	vmware	esxi	4.1	Yes
Operating System	vmware	esxi	4.1	Yes
Operating System	vmware	esxi	5.0	Yes
Operating System	vmware	esxi	5.0	Yes
Operating System	vmware	esxi	5.0	Yes

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=31b24b955c3ebbb6f3008a6374e61cf7c05a193c ([email protected])
http://openwall.com/lists/oss-security/2010/12/06/3 Exploit, Mailing List, Patch, Third Party Advisory ([email protected])
http://openwall.com/lists/oss-security/2010/12/06/9 Exploit, Mailing List, Patch, Third Party Advisory ([email protected])
http://secunia.com/advisories/42884 Third Party Advisory ([email protected])
http://secunia.com/advisories/42890 Third Party Advisory ([email protected])
http://secunia.com/advisories/46397 Third Party Advisory ([email protected])
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34 Release Notes, Vendor Advisory ([email protected])
http://www.redhat.com/support/errata/RHSA-2011-0007.html Third Party Advisory ([email protected])
http://www.redhat.com/support/errata/RHSA-2011-0017.html Third Party Advisory ([email protected])
http://www.securityfocus.com/archive/1/520102/100/0/threaded Third Party Advisory, VDB Entry ([email protected])
http://www.securityfocus.com/bid/45208 Third Party Advisory, VDB Entry ([email protected])
http://www.vmware.com/security/advisories/VMSA-2011-0012.html Third Party Advisory ([email protected])
https://bugzilla.kernel.org/show_bug.cgi?id=15582 Exploit, Issue Tracking, Patch, Vendor Advisory ([email protected])
https://bugzilla.redhat.com/show_bug.cgi?id=660188 Exploit, Issue Tracking, Patch, Third Party Advisory ([email protected])
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=31b24b955c3ebbb6f3008a6374e61cf7c05a193c (af854a3a-2127-422b-91ae-364da2661108)
http://openwall.com/lists/oss-security/2010/12/06/3 Exploit, Mailing List, Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://openwall.com/lists/oss-security/2010/12/06/9 Exploit, Mailing List, Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/42884 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/42890 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/46397 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34 Release Notes, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2011-0007.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2011-0017.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/520102/100/0/threaded Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/45208 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/security/advisories/VMSA-2011-0012.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.kernel.org/show_bug.cgi?id=15582 Exploit, Issue Tracking, Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.redhat.com/show_bug.cgi?id=660188 Exploit, Issue Tracking, Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)