VULNERABILITY INTELLIGENCE

CVE-2010-2522

CVSS score2.1 LOW
EPSS probability0.34%
CISA KEVNot currently listed
Published2010-07-13
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:N/I:P/A:N

Description

The mipv6 daemon in UMIP 0.4 does not verify that netlink messages originated in the kernel, which allows local users to spoof netlink socket communication via a crafted unicast message.

Primary references