CVE-2010-4165: Divide by Zero
Last updated 24 July 2024
Other sources
The dotcpsetsockopt function in net/ipv4/tcp.c in the Linux kernel b ...
— Debian
With commit f5fff5dc8a7a3f395b0525c02ba92c95d42b7390, a user program can pass in TCPMAXSEG of 12 (or TCPOLENTSTAMPALIGNED), and cause kernel oops with division by 0 in tcpselectinitialwindow.
Proposed patch: http://www.spinics.net/lists/netdev/msg146495.html
Reference: http://www.spinics.net/lists/netdev/msg146405.html
Acknowledgements:
Red Hat would like to thank Steve Chen for reporting this issue.
— Red Hat
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4165?
CVE-2010-4165 has been assigned a severity level that can lead to denial of service conditions.
How do I fix CVE-2010-4165?
To remediate CVE-2010-4165, it is recommended to upgrade your Linux kernel to a version later than 2.6.37.
What software is affected by CVE-2010-4165?
CVE-2010-4165 affects versions of the Linux kernel prior to 2.6.37, including specific distributions like Debian and openSUSE.
What is the impact of CVE-2010-4165?
CVE-2010-4165 allows local users to cause a denial of service (OOPS) through improper handling of TCP_MAXSEG values.
Is CVE-2010-4165 exploitable remotely?
CVE-2010-4165 is not exploitable remotely as it requires local user access to trigger the vulnerability.