NVD

Id
12978  
Name
CVE-2010-1451  
Description
The TSB I-TLB load implementation in arch/sparc/kernel/tsb.S in the Linux kernel before 2.6.33 on the SPARC platform does not properly obtain the value of a certain _PAGE_EXEC_4U bit and consequently does not properly implement a non-executable stack, which makes it easier for context-dependent attackers to exploit stack-based buffer overflows via a crafted application.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-05-07  
Modified Date
2012-03-19  
Seq
2010-1451  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
71899 12978 CVE-2010-1451 [linux-sparc] 20100219 Re: Execution possible in non-executable mappings in recent 2.6 kernels  View
71900 12978 CVE-2010-1451 [linux-sparc] 20100219 Execution possible in non-executable mappings in recent 2.6 kernels  View
71901 12978 CVE-2010-1451 DSA-2053  View
71902 12978 CVE-2010-1451 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.33  View
71903 12978 CVE-2010-1451 [oss-security] 20100224 kernel: execution possible in non-executable mappings in recent 2.6 kernels (SPARC only)  View
71904 12978 CVE-2010-1451 [oss-security] 20100505 Re: CVE Request [was Re: kernel: execution possible in non-executable mappings in recent 2.6 kernels (SPARC only)]  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
38887 JVNDB-2010-004672 SPARC プラットフォーム上の Linux kernel におけるスタックベースのバッファオーバーフローの脆弱性 SPARC プラットフォーム上で稼動する Linux kernel の arch/sparc/kernel/tsb.S の TSB I-TLB load 実装は、特定の _PAGE_EXEC_4U ビットの値を適切に取得せず、実行不可能なスタックを適切に処理しないため、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2010-1451 44031 CVE-2010-1451 12978 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004672.html 2010-05-05 2012-09-25 View