CVE-2010-4526 vulnerability in Red Hat and Other Products
Published on January 11, 2011
Race condition in the sctp_icmp_proto_unreachable function in net/sctp/input.c in Linux kernel 2.6.11-rc2 through 2.6.33 allows remote attackers to cause a denial of service (panic) via an ICMP unreachable message to a socket that is already locked by a user, which causes the socket to be freed and triggers list corruption, related to the sctp_wait_for_connect function.
Products Associated with CVE-2010-4526
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2010-4526 are published in these products:
Exploit Probability
EPSS
1.52%
Percentile
81.05%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.