VULNERABILITY INTELLIGENCE

CVE-2010-2495

CVSS score10 NONE
EPSS probability2.93%
CISA KEVNot currently listed
Published2010-09-08
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

The pppol2tp_xmit function in drivers/net/pppol2tp.c in the L2TP implementation in the Linux kernel before 2.6.34 does not properly validate certain values associated with an interface, which allows attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via vectors related to a routing change.

Weakness classification

  • nvd@nist.gov: CWE-476

Primary references