NVD

Id
12009  
Name
CVE-2010-0453  
Description
The ucode_ioctl function in intel/io/ucode_drv.c in Sun Solaris 10 and OpenSolaris snv_69 through snv_133, when running on x86 architectures, allows local users to cause a denial of service (panic) via a request with a 0 size value to the UCODE_GET_VERSION IOCTL, which triggers a NULL pointer dereference in the ucode_get_rev function, related to retrieval of the microcode revision.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-18  
Published
2010-02-03  
Modified Date
2012-10-22  
Seq
2010-0453  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
66291 12009 CVE-2010-0453 oval:org.mitre.oval:def:6959  View
66292 12009 CVE-2010-0453 http://sunsolve.sun.com/search/document.do?assetkey=1-21-143913-01-1  View
66293 12009 CVE-2010-0453 275910  View
66294 12009 CVE-2010-0453 1021799  View
66295 12009 CVE-2010-0453 http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html  View
66296 12009 CVE-2010-0453 20100131 [TKADV2010-001] Oracle Solaris UCODE_GET_VERSION IOCTL Kernel NULL Pointer Dereference  View
66297 12009 CVE-2010-0453 38016  View
66298 12009 CVE-2010-0453 http://www.trapkit.de/advisories/TKADV2010-001.txt  View
66299 12009 CVE-2010-0453 TA10-103B  View
66300 12009 CVE-2010-0453 ADV-2010-0270  View
66301 12009 CVE-2010-0453 solaris-microcode-dos(55991)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35656 JVNDB-2010-001436 Oracle Sun Product Suite の Solaris コンポーネントにおける脆弱性 Oracle Sun Product Suite の Solaris コンポーネントには、可用性に影響のある脆弱性が存在します。 CVE-2010-0453 43033 CVE-2010-0453 12009 4.9 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001436.html 2010-02-03 2010-05-14 View