CVE-2010-2478: Integer Overflow
Description of problem: On a 32-bit machine, info.rulecnt >= 0x40000000 leads to integer overflow and the buffer may be smaller than needed. Since ETHTOOLGRXCLSRLALL is unprivileged, this can presumably be used for at least denial of service.
Reference: http://thread.gmane.org/gmane.linux.network/164869
Other sources
Integer overflow in the ethtoolgetrxnfc function in net/core/ethtool.c in the Linux kernel before 2.6.33.7 on 32-bit platforms allows local users to cause a denial of service or possibly have unspecified other impact via an ETHTOOLGRXCLSRLALL ethtool command with a large info.rulecnt value that triggers a buffer overflow, a different vulnerability than CVE-2010-3084.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2010-2478?
CVE-2010-2478 is considered a moderate severity vulnerability due to the possibility of denial of service on affected systems.
How do I fix CVE-2010-2478?
To fix CVE-2010-2478, upgrade the Linux kernel to a version that is higher than 2.6.33.7 for affected distributions.
Which systems are affected by CVE-2010-2478?
CVE-2010-2478 affects various versions of the Linux kernel on Debian, Ubuntu, and SUSE systems.
Can CVE-2010-2478 be exploited remotely?
CVE-2010-2478 requires local access to the affected system, making remote exploitation unlikely.
What are the potential impacts of CVE-2010-2478?
The primary impact of CVE-2010-2478 is denial of service, which can disrupt the operation of the affected system.