CVE:CVE-2010-3432
CNNVD:CNNVD-201011-210
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 2.6.35.6之前版本存在输入验证错误漏洞，该漏洞源于对分组数据结构进行了无关的初始化。远程攻击者可以借助某个SCTP通信序列导致拒绝服务。
solution:Upgrade linux linux_kernel to a higher version than 2.6.35.6,and avoid the version (,2.6.35.6); Upgrade opensuse opensuse to a higher version than 11.3,and avoid the version 11.3; Upgrade suse linux_enterprise_real_time_extension to a higher version than 11:sp1,and avoid the version 11:sp1; Upgrade debian debian_linux to a higher version than 5.0,and avoid the version 5.0; Upgrade canonical ubuntu_linux to a higher version than 6.06,8.04,9.04,9.10,10.04,10.10,and avoid the version 6.06,8.04,9.04,9.10,10.04,10.10