CVE-2010-4165

published 2010-11-22

CVE-2010-4165: The do_tcp_setsockopt function in net/ipv4/tcp.c in the Linux kernel before 2.6.37-rc2 does not properly restrict TCP_MAXSEG (aka MSS) values, which allows…

medium 4.9 CVSS 3.1

AV L AC L Au N C N I N A C

EXPLOIT

The do_tcp_setsockopt function in net/ipv4/tcp.c in the Linux kernel before 2.6.37-rc2 does not properly restrict TCP_MAXSEG (aka MSS) values, which allows local users to cause a denial of service (OOPS) via a setsockopt call that specifies a small value, leading to a divide-by-zero error or incorrect use of a signed integer.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
linux	linux_kernel	< 2.6.37	2.6.37
linux	linux_kernel	—	—
opensuse	opensuse	—	—
opensuse	opensuse	—	—
suse	linux_enterprise_desktop	—	—
suse	linux_enterprise_real_time_extension	—	—
suse	linux_enterprise_server	—	—

CWE-369