NVD

Id
15239  
Name
CVE-2010-3904  
Description
The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-12-06  
Modified Date
2012-03-19  
Seq
2010-3904  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
85875 15239 CVE-2010-3904 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=799c10559d60f159ab2232203f222f18fa3c4a5f  View
85876 15239 CVE-2010-3904 SUSE-SA:2010:053  View
85877 15239 CVE-2010-3904 SUSE-SA:2010:057  View
85878 15239 CVE-2010-3904 SUSE-SA:2011:007  View
85879 15239 CVE-2010-3904 1024613  View
85880 15239 CVE-2010-3904 VU#362983  View
85881 15239 CVE-2010-3904 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36  View
85882 15239 CVE-2010-3904 RHSA-2010:0792  View
85883 15239 CVE-2010-3904 RHSA-2010:0842  View
85884 15239 CVE-2010-3904 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console  View
85885 15239 CVE-2010-3904 USN-1000-1  View
85886 15239 CVE-2010-3904 http://www.vmware.com/security/advisories/VMSA-2011-0012.html  View
85887 15239 CVE-2010-3904 http://www.vsecurity.com/download/tools/linux-rds-exploit.c  View
85888 15239 CVE-2010-3904 http://www.vsecurity.com/resources/advisory/20101019-1/  View
85889 15239 CVE-2010-3904 ADV-2011-0298  View
85890 15239 CVE-2010-3904 https://bugzilla.redhat.com/show_bug.cgi?id=642896  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36521 JVNDB-2010-002301 Linux カーネルにおける RDS プロトコルの実装に脆弱性 Linux カーネルの RDS プロトコル実装には、権限昇格の脆弱性が存在します。 CVE-2010-3904 46484 CVE-2010-3904 15239 7.2 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002301.html 2010-10-26 2012-12-21 View