NVD

Id
15194  
Name
CVE-2010-3859  
Description
Multiple integer signedness errors in the TIPC implementation in the Linux kernel before 2.6.36.2 allow local users to gain privileges via a crafted sendmsg call that triggers a heap-based buffer overflow, related to the tipc_msg_build function in net/tipc/msg.c and the verify_iovec function in net/core/iovec.c.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-12-29  
Modified Date
2013-08-21  
Seq
2010-3859  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
85478 15194 CVE-2010-3859 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=253eacc070b114c2ec1f81b067d2fed7305467b0  View
85479 15194 CVE-2010-3859 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=8acfe468b0384e834a303f08ebc4953d72fb690a  View
85480 15194 CVE-2010-3859 [netdev] 20101021 TIPC security issues  View
85481 15194 CVE-2010-3859 DSA-2126  View
85482 15194 CVE-2010-3859 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36.2  View
85483 15194 CVE-2010-3859 MDVSA-2011:029  View
85484 15194 CVE-2010-3859 [oss-security] 20101022 CVE request: kernel: heap overflow in TIPC  View
85485 15194 CVE-2010-3859 [oss-security] 20101022 Re: CVE request: kernel: heap overflow in TIPC  View
85486 15194 CVE-2010-3859 RHSA-2011:0004  View
85487 15194 CVE-2010-3859 RHSA-2011:0162  View
85488 15194 CVE-2010-3859 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console  View
85489 15194 CVE-2010-3859 44354  View
85490 15194 CVE-2010-3859 [netdev] 20101027 [PATCH 0/4] RFC: tipc int vs size_t fixes  View
85491 15194 CVE-2010-3859 [netdev] 20101027 Re: [PATCH 1/4] tipc: Fix bugs in tipc_msg_calc_data_size()  View
85492 15194 CVE-2010-3859 [netdev] 20101027 [PATCH 3/4] tipc: Update arguments to use size_t for iovec array sizes  View
85493 15194 CVE-2010-3859 [netdev] 20101027 [PATCH 1/4] tipc: Fix bugs in tipc_msg_calc_data_size()  View
85494 15194 CVE-2010-3859 [netdev] 20101027 [PATCH 4/4] tipc: Fix bugs in sending of large amounts of byte-stream data  View
85495 15194 CVE-2010-3859 [netdev] 20101027 [PATCH 2/4] tipc: Fix bugs in tipc_msg_build()  View
85496 15194 CVE-2010-3859 [netdev] 20101028 Re: [PATCH 2/4] tipc: Fix bugs in tipc_msg_build()  View
85497 15194 CVE-2010-3859 http://www.vmware.com/security/advisories/VMSA-2011-0012.html  View
85498 15194 CVE-2010-3859 ADV-2011-0024  View
85499 15194 CVE-2010-3859 ADV-2011-0168  View
85500 15194 CVE-2010-3859 https://bugzilla.redhat.com/show_bug.cgi?id=645867  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36892 JVNDB-2010-002672 Linux kernel の TIPC 実装における権限を取得される脆弱性 Linux kernel の TIPC 実装には、net/tipc/msg.c 内の tipc_msg_build 関数および net/core/iovec.c 内の verify_iovec 関数に関する処理に不備があるため、権限を取得される脆弱性が存在します。 CVE-2010-3859 46439 CVE-2010-3859 15194 6.9 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002672.html 2010-12-09 2012-12-21 View