CVE-2010-3873 describes a denial-of-service vulnerability in the X.25 implementation of the Linux kernel, affecting versions prior to 2.6.36.2, including Debian, openSUSE, and SUSE distributions. This flaw stems from improper parsing of X.25 facilities, allowing remote attackers to trigger heap memory corruption and system panics through malformed X25_FAC_CALLING_AE or X25_FAC_CALLED_AE data. With a CVSS score of 5.0, it is a medium-severity vulnerability that can be exploited remotely with low attack complexity, leading to a partial impact on availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 2.6.36.2CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
11.4CPE matchmatch criteria | cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:* | ||
9CPE matchmatch criteria | cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:* | ||
5.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:N/I:N/A:P
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.