NVD

Id
14708  
Name
CVE-2010-3301  
Description
The IA32 system call emulation functionality in arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.36-rc4-git2 on the x86_64 platform does not zero extend the %eax register after the 32-bit entry path to ptrace is used, which allows local users to gain privileges by triggering an out-of-bounds access to the system call table using the %rax register. NOTE: this vulnerability exists because of a CVE-2007-4573 regression.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-09-22  
Modified Date
2012-03-19  
Seq
2010-3301  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
81452 14708 CVE-2010-3301 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=36d001c70d8a0144ac1d038f6876c484849a74de  View
81453 14708 CVE-2010-3301 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=eefdca043e8391dcd719711716492063030b55ac  View
81454 14708 CVE-2010-3301 SUSE-SR:2010:017  View
81455 14708 CVE-2010-3301 SUSE-SA:2011:007  View
81456 14708 CVE-2010-3301 http://sota.gen.nz/compat2/  View
81457 14708 CVE-2010-3301 http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.36-rc4-git2.log  View
81458 14708 CVE-2010-3301 MDVSA-2010:198  View
81459 14708 CVE-2010-3301 MDVSA-2010:247  View
81460 14708 CVE-2010-3301 [oss-security] 20100916 CVE-2010-3301 kernel: IA32 System Call Entry Point Vulnerability  View
81461 14708 CVE-2010-3301 [oss-security] 20100916 Re: CVE-2010-3301 kernel: IA32 System Call Entry Point Vulnerability  View
81462 14708 CVE-2010-3301 RHSA-2010:0842  View
81463 14708 CVE-2010-3301 USN-1041-1  View
81464 14708 CVE-2010-3301 ADV-2010-3117  View
81465 14708 CVE-2010-3301 ADV-2011-0070  View
81466 14708 CVE-2010-3301 ADV-2011-0298  View
81467 14708 CVE-2010-3301 https://bugzilla.redhat.com/show_bug.cgi?id=634449  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36698 JVNDB-2010-002478 x86_64 プラットフォーム上で稼動する Linux kernel の IA32 システムコールエミュレーション機能における権限昇格の脆弱性 x86_64 プラットフォーム上で稼動する Linux kernel の arch/x86/ia32/ia32entry.S 内にある IA32 システムコールエミュレーション機能は、32 ビット互換の ptrace システムコールを処理後に eax レジスタをゼロ拡張させないため、権限を取得される脆弱性が存在します。 CVE-2010-3301 45881 CVE-2010-3301 14708 7.2 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002478.html 2010-09-22 2010-12-13 View