CVE-2010-4160

CVE-2010-4160 describes multiple integer overflow vulnerabilities in the PPPoL2TP and IPoL2TP implementations of the Linux kernel, affecting versions before 2.6.36.2, including openSUSE and SUSE. These flaws, rated with a CVSS score of 6.9, allow a local attacker to trigger a denial of service through heap memory corruption or potentially gain elevated privileges via a crafted sendto call, requiring medium attack complexity. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.