CWE Code: 189
Vulnerability Type: privilege_escalation
CVSS Score: 6.9
CWE Name:  Numeric Errors
Summary: multiple integer overflows in the (1) pppol2tp_sendmsg function in net/l2tp/l2tp_ppp.c, and the (2) l2tp_ip_sendmsg function in net/l2tp/l2tp_ip.c, in the pppol2tp and ipol2tp implementations in the linux kernel before 2.6.36.2 allow local users to cause a denial of service (heap memory corruption and panic) or possibly gain privileges via a crafted sendto call.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2011-01-07
Last Modified Date: 2013-01-21