CVE

Id
46827  
CVE No.
CVE-2010-4243  
Status
Candidate  
Description
fs/exec.c in the Linux kernel before 2.6.37 does not enable the OOM Killer to assess use of stack memory by arrays representing the (1) arguments and (2) environment, which allows local users to cause a denial of service (memory consumption) via a crafted exec system call, aka an "OOM dodging issue," a related issue to CVE-2010-3858.  
Phase
Assigned (20101116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
511665 46827 CVE-2010-4243 BUGTRAQ:20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console  View
511666 46827 CVE-2010-4243 URL:http://www.securityfocus.com/archive/1/archive/1/520102/100/0/threaded  View
511667 46827 CVE-2010-4243 EXPLOIT-DB:15619  View
511668 46827 CVE-2010-4243 URL:http://www.exploit-db.com/exploits/15619  View
511669 46827 CVE-2010-4243 MLIST:[linux-kernel] 20100827 [PATCH] exec argument expansion can inappropriately trigger OOM-killer  View
511670 46827 CVE-2010-4243 URL:http://lkml.org/lkml/2010/8/27/429  View
511671 46827 CVE-2010-4243 MLIST:[linux-kernel] 20100830 Re: [PATCH] exec argument expansion can inappropriately trigger OOM-killer  View
511672 46827 CVE-2010-4243 URL:http://lkml.org/lkml/2010/8/29/206  View
511673 46827 CVE-2010-4243 MLIST:[linux-kernel] 20100830 Re: [PATCH] exec argument expansion can inappropriately trigger OOM-killer  View
511674 46827 CVE-2010-4243 URL:http://lkml.org/lkml/2010/8/30/138  View
511675 46827 CVE-2010-4243 MLIST:[linux-kernel] 20100830 Re: [PATCH] exec argument expansion can inappropriately trigger OOM-killer  View
511676 46827 CVE-2010-4243 URL:http://lkml.org/lkml/2010/8/30/378  View
511677 46827 CVE-2010-4243 MLIST:[linux-kernel] 20101130 [PATCH 1/2] exec: make argv/envp memory visible to oom-killer  View
511678 46827 CVE-2010-4243 URL:http://linux.derkeiler.com/Mailing-Lists/Kernel/2010-11/msg13278.html  View
511679 46827 CVE-2010-4243 MLIST:[oss-security] 20101122 CVE request: kernel: mm: mem allocated invisible to oom_kill() when not attached to any threads  View
511680 46827 CVE-2010-4243 URL:http://openwall.com/lists/oss-security/2010/11/22/6  View
511681 46827 CVE-2010-4243 MLIST:[oss-security] 20101122 Re: CVE request: kernel: mm: mem allocated invisible to oom_kill() when not attached to any threads  View
511682 46827 CVE-2010-4243 URL:http://openwall.com/lists/oss-security/2010/11/22/15  View
511683 46827 CVE-2010-4243 MISC:http://grsecurity.net/~spender/64bit_dos.c  View
511684 46827 CVE-2010-4243 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=3c77f845722158206a7209c45ccddc264d19319c  View
511685 46827 CVE-2010-4243 CONFIRM:http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37  View
511686 46827 CVE-2010-4243 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=625688  View
511687 46827 CVE-2010-4243 CONFIRM:http://www.vmware.com/security/advisories/VMSA-2011-0012.html  View
511688 46827 CVE-2010-4243 REDHAT:RHSA-2011:0017  View
511689 46827 CVE-2010-4243 URL:http://www.redhat.com/support/errata/RHSA-2011-0017.html  View
511690 46827 CVE-2010-4243 BID:45004  View
511691 46827 CVE-2010-4243 URL:http://www.securityfocus.com/bid/45004  View
511692 46827 CVE-2010-4243 SECUNIA:42884  View
511693 46827 CVE-2010-4243 URL:http://secunia.com/advisories/42884  View
511694 46827 CVE-2010-4243 SECUNIA:46397  View
511695 46827 CVE-2010-4243 URL:http://secunia.com/advisories/46397  View
511696 46827 CVE-2010-4243 XF:linux-kernel-execve-dos(64700)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30764 JVNDB-2011-001003 Xen の do_block_io_op 関数におけるサービス運用妨害 (DoS) の脆弱性 Xen の drivers/xen/blkback/blkback.c および drivers/xen/blktap/blktap.c 内にある do_block_io_op 関数には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-4247 46827 5.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001003.html  View