CVE-2010-1086: High severity Linux Linux kernel vulnerability
Description of problem: Reported by Ang Way Chuang, Mauro Carvalho informed Red Hat about a security issue in the ULE decapsulation code.
ULE (Unidirectional Lightweight Encapsulation RFC 4326) decapsulation has a bug that causes endless loop when Payload Pointer of MPEG2-TS frame is 182 or 183. Anyone who sends malicious MPEG2-TS frame will cause the receiver of ULE SNDU to go into endless loop.
Acknowledgements:
Red Hat would like to thank Ang Way Chuang for reporting this issue.
Other sources
The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvbnet.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers to cause a denial of service (infinite loop) via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE.
— MITRE
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1086?
CVE-2010-1086 has been classified with a moderate severity due to the potential for causing denial of service through an endless loop.
How do I fix CVE-2010-1086?
To fix CVE-2010-1086, users should upgrade to a later version of the Linux kernel that is not affected, beyond version 2.6.33.
What software versions are affected by CVE-2010-1086?
CVE-2010-1086 affects Linux kernel versions up to and including 2.6.33 and Debian Linux version 5.0.
What type of vulnerability is CVE-2010-1086?
CVE-2010-1086 is a vulnerability in the ULE decapsulation code leading to a denial of service.
Who reported the issue related to CVE-2010-1086?
The vulnerability identified as CVE-2010-1086 was reported by Ang Way Chuang and subsequently informed to Red Hat by Mauro Carvalho.