CVEvulnerability

CVE-2010-4263

7.9 HIGH Published 2011-01-18 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-01-18
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.9 HIGH — AV:A/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-476

Description

The igb_receive_skb function in drivers/net/igb/igb_main.c in the Intel Gigabit Ethernet (aka igb) subsystem in the Linux kernel before 2.6.34, when Single Root I/O Virtualization (SR-IOV) and promiscuous mode are enabled but no VLANs are registered, allows remote attackers to cause a denial of service (NULL pointer dereference and panic) and possibly have unspecified other impact via a VLAN tagged frame.

Affected configurations

• linux linux kernel (< 2.6.34) • vmware esx 3.0.0 • vmware esx 3.0.1 • vmware esx 3.0.2 • vmware esx 3.0.3 • vmware esx 3.5 • vmware esx 4.0 • vmware esx 4.1 • vmware esxi 3.5 • vmware esxi 4.0 • vmware esxi 4.1 • vmware esxi 5.0

Related

Weakness · CWE (1)

  • CWE-476 NULL Pointer Dereference weakness

References