The socket implementation in net/core/sock.c in the Linux kernel before 2.6.35 does not properly manage a backlog of received packets, which allows remote attackers to cause a denial of service by sending a large amount of network traffic, related to the sk_add_backlog function and the sk_rmem_alloc socket field. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4251.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2022-10-03T16:21:05

Updated: 2022-10-03T16:21:05

Reserved: 2022-10-03T00:00:00


Link: CVE-2010-4805

JSON object: View

cve-icon NVD Information

Status : Modified

Published: 2011-05-26T16:55:03.393

Modified: 2023-11-07T02:06:25.687


Link: CVE-2010-4805

JSON object: View

cve-icon Redhat Information

No data.

CWE