CVE

Id
47111  
CVE No.
CVE-2010-4527  
Status
Candidate  
Description
The load_mixer_volumes function in sound/oss/soundcard.c in the OSS sound subsystem in the Linux kernel before 2.6.37 incorrectly expects that a certain name field ends with a "" character, which allows local users to conduct buffer overflow attacks and gain privileges, or possibly obtain sensitive information from kernel memory, via a SOUND_MIXER_SETLEVELS ioctl call.  
Phase
Assigned (20101209)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
515171 47111 CVE-2010-4527 MLIST:[oss-security] 20101230 CVE request: kernel: buffer overflow in OSS load_mixer_volumes  View
515172 47111 CVE-2010-4527 URL:http://openwall.com/lists/oss-security/2010/12/31/1  View
515173 47111 CVE-2010-4527 MLIST:[oss-security] 20101231 Re: CVE request: kernel: buffer overflow in OSS load_mixer_volumes  View
515174 47111 CVE-2010-4527 URL:http://openwall.com/lists/oss-security/2010/12/31/4  View
515175 47111 CVE-2010-4527 MISC:http://xorl.wordpress.com/2011/01/09/cve-2010-4527-linux-kernel-oss-sound-card-driver-buffer-overflow/  View
515176 47111 CVE-2010-4527 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=d81a12bc29ae4038770e05dce4ab7f26fd5880fb  View
515177 47111 CVE-2010-4527 CONFIRM:http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37  View
515178 47111 CVE-2010-4527 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=667615  View
515179 47111 CVE-2010-4527 SUSE:SUSE-SA:2011:008  View
515180 47111 CVE-2010-4527 URL:http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html  View
515181 47111 CVE-2010-4527 BID:45629  View
515182 47111 CVE-2010-4527 URL:http://www.securityfocus.com/bid/45629  View
515183 47111 CVE-2010-4527 SECUNIA:42765  View
515184 47111 CVE-2010-4527 URL:http://secunia.com/advisories/42765  View
515185 47111 CVE-2010-4527 SECUNIA:43291  View
515186 47111 CVE-2010-4527 URL:http://secunia.com/advisories/43291  View
515187 47111 CVE-2010-4527 VUPEN:ADV-2011-0375  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33676 JVNDB-2011-003918 PCSC-Lite の ATRDecodeAtr 関数におけるスタックベースのバッファオーバーフローの脆弱性 PCSC-Lite の pcscd のAnswer-to-Reset (ATR) Handler (atrhandler.c) の ATRDecodeAtr 関数には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2010-4531 47111 4.4 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003918.html  View