Unscored severity · published Jul 13, 2010
CVE-2010-2522
The mipv6 daemon in UMIP 0.4 does not verify that netlink messages originated in the kernel, which allows local users to spoof netlink socket communication via a crafted unicast…
–
CVSS
0.3%
EPSS
No
On KEV
Description
The mipv6 daemon in UMIP 0.4 does not verify that netlink messages originated in the kernel, which allows local users to spoof netlink socket communication via a crafted unicast message.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 27% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UM
Umip · Linux-ipv6
0.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-2522
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-2522
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html
marc.info
http://marc.info/?l=oss-security&m=127850299910685&w=2
Patch
http://marc.info/?l=oss-security&m=127859390815405&w=2
www.openwall.com
http://www.openwall.com/lists/oss-security/2010/07/06/5
www.openwall.com
http://www.openwall.com/lists/oss-security/2010/07/07/4
www.openwall.com
http://www.openwall.com/lists/oss-security/2010/07/09/1
More from Umip
–
CVE-2010-2523
Multiple buffer overflows in ha.c in the mipv6 daemon in UMIP 0.4 allow remote attackers to have an unspecified impact via a crafted (1) ND_OPT_PREFIX_INFORMATION or (2)…