CVE-2010-3084: Buffer Overflow
Buffer overflow in the niugetethtooltcamall function in drivers/net/niu.c in the Linux kernel before 2.6.36-rc4 allows local users to cause a denial of service or possibly have unspecified other impact via the ETHTOOLGRXCLSRLALL ethtool command.
Other sources
Description of problem: niugetethtooltcamall() assumes that its output buffer is the right size, and warns before returning if it is not. However, the output buffer size is under user control and ETHTOOLGRXCLSRLALL is an unprivileged ethtool command. Therefore this is at least a local denial-of-service vulnerability.
Change it to check before writing each entry and to return an error if the buffer is already full.
http://www.spinics.net/lists/netdev/msg140133.html
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3084?
CVE-2010-3084 has a high severity as it can lead to local denial of service and potentially other impacts.
How do I fix CVE-2010-3084?
To fix CVE-2010-3084, update the Linux kernel to version 2.6.36 or above, which patches the buffer overflow vulnerability.
Which Linux versions are affected by CVE-2010-3084?
CVE-2010-3084 affects Linux kernel versions prior to 2.6.36-rc4, including 2.6.36-rc1, 2.6.36-rc2, and 2.6.36-rc3.
Can CVE-2010-3084 be exploited remotely?
CVE-2010-3084 is not typically exploitable remotely as it requires local user access to impact the system.
What command is related to the CVE-2010-3084 vulnerability?
The vulnerability in CVE-2010-3084 is associated with the ETHTOOL_GRXCLSRLALL ethtool command, which triggers the buffer overflow.