CVE

Id
45543  
CVE No.
CVE-2010-2959  
Status
Candidate  
Description
Integer overflow in net/can/bcm.c in the Controller Area Network (CAN) implementation in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6, and 2.6.35.x before 2.6.35.4 allows attackers to execute arbitrary code or cause a denial of service (system crash) via crafted CAN traffic.  
Phase
Assigned (20100804)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
496138 45543 CVE-2010-2959 MLIST:[oss-security] 20100820 kernel: can: add limit for nframes and clean up signed/unsigned variables  View
496139 45543 CVE-2010-2959 URL:http://www.openwall.com/lists/oss-security/2010/08/20/2  View
496140 45543 CVE-2010-2959 MISC:http://jon.oberheide.org/files/i-can-haz-modharden.c  View
496141 45543 CVE-2010-2959 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=5b75c4973ce779520b9d1e392483207d6f842cde  View
496142 45543 CVE-2010-2959 CONFIRM:http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.53  View
496143 45543 CVE-2010-2959 CONFIRM:http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.21  View
496144 45543 CVE-2010-2959 CONFIRM:http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34.6  View
496145 45543 CVE-2010-2959 CONFIRM:http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35.4  View
496146 45543 CVE-2010-2959 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=625699  View
496147 45543 CVE-2010-2959 DEBIAN:DSA-2094  View
496148 45543 CVE-2010-2959 URL:http://www.debian.org/security/2010/dsa-2094  View
496149 45543 CVE-2010-2959 FEDORA:FEDORA-2010-13903  View
496150 45543 CVE-2010-2959 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-September/046947.html  View
496151 45543 CVE-2010-2959 MANDRIVA:MDVSA-2010:198  View
496152 45543 CVE-2010-2959 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2010:198  View
496153 45543 CVE-2010-2959 SUSE:SUSE-SA:2010:041  View
496154 45543 CVE-2010-2959 URL:http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html  View
496155 45543 CVE-2010-2959 SUSE:SUSE-SA:2010:040  View
496156 45543 CVE-2010-2959 URL:http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html  View
496157 45543 CVE-2010-2959 SUSE:SUSE-SA:2011:007  View
496158 45543 CVE-2010-2959 URL:http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html  View
496159 45543 CVE-2010-2959 BID:42585  View
496160 45543 CVE-2010-2959 URL:http://www.securityfocus.com/bid/42585  View
496161 45543 CVE-2010-2959 SECUNIA:41512  View
496162 45543 CVE-2010-2959 URL:http://secunia.com/advisories/41512  View
496163 45543 CVE-2010-2959 VUPEN:ADV-2010-2430  View
496164 45543 CVE-2010-2959 URL:http://www.vupen.com/english/advisories/2010/2430  View
496165 45543 CVE-2010-2959 VUPEN:ADV-2011-0298  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
37210 JVNDB-2010-002995 Linux kernel の drivers/media/video/v4l2-compat-ioctl32.c における任意のカーネルメモリロケーションに書き込まれる脆弱性 Linux kernel の Video4Linux (V4L) 実装の drivers/media/video/v4l2-compat-ioctl32.c は、メモリコピー操作の宛先を適切に検証しないため、任意のカーネルメモリロケーションに書き込まれ、その結果権限を取得される脆弱性が存在します。 CVE-2010-2963 45543 6.2 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002995.html  View