CVE-2008-2710: Integer Overflow
Integer signedness error in the ipsetsrcfilter function in the IP Multicast Filter in uts/common/inet/ip/ipmulti.c in the kernel in Sun Solaris 10 and OpenSolaris before snv92 allows local users to execute arbitrary code in other Solaris Zones via an SIOCSIPMSFILTER IOCTL request with a large value of the imsf->imsfnumsrc field, which triggers an out-of-bounds write of kernel memory. NOTE: this was reported as an integer overflow, but the root cause involves the bypass of a signed comparison.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-2710?
CVE-2008-2710 is considered to have a high severity due to the potential for local users to execute arbitrary code.
How do I fix CVE-2008-2710?
To mitigate CVE-2008-2710, apply the available patches from Oracle for Solaris versions affected by this vulnerability.
Which systems are affected by CVE-2008-2710?
CVE-2008-2710 affects Sun Solaris 10 and OpenSolaris versions before snv_92 on SPARC architecture.
What type of vulnerability is CVE-2008-2710?
CVE-2008-2710 is an integer signedness error vulnerability that can lead to arbitrary code execution in Solaris Zones.
Can CVE-2008-2710 be exploited remotely?
CVE-2008-2710 requires local access to the system, thus it cannot be exploited remotely.