Oval Definition:oval:org.mitre.oval:def:22623
Revision Date:2014-05-26Version:28
Title:ELSA-2011:0303: kernel security and bug fix update (Moderate)
Description:The socket implementation in net/core/sock.c in the Linux kernel before 2.6.35 does not properly manage a backlog of received packets, which allows remote attackers to cause a denial of service by sending a large amount of network traffic, related to the sk_add_backlog function and the sk_rmem_alloc socket field. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4251.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2010-4249
CVE-2010-4251
CVE-2010-4655
CVE-2010-4805
ELSA-2011:0303-01
Platform(s):Oracle Linux 5
Product(s):kernel
Definition Synopsis
  • Oracle Linux 5.x
  • AND rpm test
  • kernel-headers is earlier than 0:2.6.18-238.5.1.el5
  • OR kernel is earlier than 0:2.6.18-238.5.1.el5
  • OR kernel-doc is earlier than 0:2.6.18-238.5.1.el5
  • OR kernel-PAE-devel is earlier than 0:2.6.18-238.5.1.el5
  • OR kernel-devel is earlier than 0:2.6.18-238.5.1.el5
  • OR kernel-debug is earlier than 0:2.6.18-238.5.1.el5
  • OR kernel-kdump is earlier than 0:2.6.18-238.5.1.el5
  • OR kernel-xen-devel is earlier than 0:2.6.18-238.5.1.el5
  • OR kernel-debug-devel is earlier than 0:2.6.18-238.5.1.el5
  • OR kernel-PAE is earlier than 0:2.6.18-238.5.1.el5
  • OR kernel-kdump-devel is earlier than 0:2.6.18-238.5.1.el5
  • OR kernel-xen is earlier than 0:2.6.18-238.5.1.el5
  • BACK