CVE-2010-1187

The Transparent Inter-Process Communication (TIPC) functionality in Linux kernel 2.6.16-rc1 through 2.6.33, and possibly other versions, allows local users to cause a denial of service (kernel OOPS) by sending datagrams through AF_TIPC before entering network mode, which triggers a NULL pointer dereference.

• CWE-476

• http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commitdiff%3Bh=d0021b252eaf65ca07ed14f0d66425dd9ccab9a6%3Bhp=6d55cb91a0020ac0d78edcad61efd6c8cf5785a3
• http://secunia.com/advisories/39830Third Party Advisory
• http://secunia.com/advisories/43315Third Party Advisory
• http://www.debian.org/security/2010/dsa-2053Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:198Third Party Advisory
• http://www.openwall.com/lists/oss-security/2010/03/30/1Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2010/03/31/1Mailing List, Third Party Advisory
• http://www.securityfocus.com/archive/1/516397/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/39120Third Party Advisory, VDB Entry
• http://www.vmware.com/security/advisories/VMSA-2011-0003.htmlThird Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=578057Issue Tracking, Third Party Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9832Third Party Advisory
• http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commitdiff%3Bh=d0021b252eaf65ca07ed14f0d66425dd9ccab9a6%3Bhp=6d55cb91a0020ac0d78edcad61efd6c8cf5785a3
• http://secunia.com/advisories/39830Third Party Advisory
• http://secunia.com/advisories/43315Third Party Advisory
• http://www.debian.org/security/2010/dsa-2053Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:198Third Party Advisory
• http://www.openwall.com/lists/oss-security/2010/03/30/1Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2010/03/31/1Mailing List, Third Party Advisory
• http://www.securityfocus.com/archive/1/516397/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/39120Third Party Advisory, VDB Entry
• http://www.vmware.com/security/advisories/VMSA-2011-0003.htmlThird Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=578057Issue Tracking, Third Party Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9832Third Party Advisory

Published

Mar 31, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-1181Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote…
• CVE-2010-1182Multiple unspecified vulnerabilities in the administrative c…
• CVE-2010-1183Certain patch-installation scripts in Oracle Solaris allow l…
• CVE-2010-1184The Microsoft wireless keyboard uses XOR encryption with a k…
• CVE-2010-1185Stack-based buffer overflow in serv.exe in SAP MaxDB 7.4.3.3…
• CVE-2010-1186Cross-site scripting (XSS) vulnerability in xml/media-rss.ph…
• CVE-2010-1188Use-after-free vulnerability in net/ipv4/tcp_input.c in the …
• CVE-2010-1189MediaWiki before 1.15.2 does not prevent wiki editors from l…
• CVE-2010-1190thumb.php in MediaWiki before 1.15.2, when used with access-…
• CVE-2010-1191Sahana disaster management system 0.6.2.2, and possibly othe…
• CVE-2010-1192libESMTP, probably 1.0.4 and earlier, does not properly hand…
• CVE-2010-1193Cross-site scripting (XSS) vulnerability in WebAccess in VMw…