NVD

Id
13722  
Name
CVE-2010-2240  
Description
The do_anonymous_page function in mm/memory.c in the Linux kernel before 2.6.27.52, 2.6.32.x before 2.6.32.19, 2.6.34.x before 2.6.34.4, and 2.6.35.x before 2.6.35.2 does not properly separate the stack and the heap, which allows context-dependent attackers to execute arbitrary code by writing to the bottom page of a shared memory segment, as demonstrated by a memory-exhaustion attack against the X.Org X server.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-09-03  
Modified Date
2012-03-19  
Seq
2010-2240  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
76291 13722 CVE-2010-2240 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=320b2b8de12698082609ebbc1a17165727f4c893  View
76292 13722 CVE-2010-2240 [security-announce] 20110428 VMSA-2011-0007 VMware ESXi and ESX Denial of Service and third party updates for Likewise components and ESX Service Console  View
76293 13722 CVE-2010-2240 oval:org.mitre.oval:def:13247  View
76294 13722 CVE-2010-2240 1024344  View
76295 13722 CVE-2010-2240 DSA-2094  View
76296 13722 CVE-2010-2240 http://www.invisiblethingslab.com/resources/misc-2010/xorg-large-memory-attacks.pdf  View
76297 13722 CVE-2010-2240 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.52  View
76298 13722 CVE-2010-2240 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.19  View
76299 13722 CVE-2010-2240 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34.4  View
76300 13722 CVE-2010-2240 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35.2  View
76301 13722 CVE-2010-2240 MDVSA-2010:172  View
76302 13722 CVE-2010-2240 MDVSA-2010:198  View
76303 13722 CVE-2010-2240 MDVSA-2011:051  View
76304 13722 CVE-2010-2240 RHSA-2010:0660  View
76305 13722 CVE-2010-2240 RHSA-2010:0670  View
76306 13722 CVE-2010-2240 RHSA-2010:0882  View
76307 13722 CVE-2010-2240 20110428 VMSA-2011-0007 VMware ESXi and ESX Denial of Service and third party updates for Likewise components and ESX Service Console  View
76308 13722 CVE-2010-2240 http://www.vmware.com/security/advisories/VMSA-2011-0007.html  View
76309 13722 CVE-2010-2240 http://www.vmware.com/security/advisories/VMSA-2011-0009.html  View
76310 13722 CVE-2010-2240 https://bugzilla.redhat.com/show_bug.cgi?id=606611  View
76311 13722 CVE-2010-2240 RHSA-2010:0661  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36242 JVNDB-2010-002022 Linux kernel の do_anonymous_page 関数における任意のコードを実行される脆弱性 Linux kernel の mm/memory.c 内にある do_anonymous_page 関数には、スタックおよびヒープを適切に区別しないため、任意のコードを実行される脆弱性が存在します。 CVE-2010-2240 44820 CVE-2010-2240 13722 7.2 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002022.html 2010-08-30 2011-06-10 View