CVE-2010-3859: Buffer Overflow
Last updated 24 July 2024
Other sources
Multiple integer signedness errors in the TIPC implementation in the L ...
— Debian
Problem Description:
The tipcmsgbuild() function in net/tipc/msg.c contains an exploitable kernel heap overflow that would allow a local user to escalate privileges to root by issuing maliciously crafted sendmsg() calls via TIPC sockets.
Reference: http://marc.info/?l=linux-netdev&m=128770476511716&w=2 http://www.openwall.com/lists/oss-security/2010/10/22/2
— Red Hat
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3859?
CVE-2010-3859 is considered to have a high severity due to the potential for local users to gain elevated privileges.
How do I fix CVE-2010-3859?
To fix CVE-2010-3859, upgrade to the Linux kernel version 2.6.36.2 or later.
Who is affected by CVE-2010-3859?
CVE-2010-3859 affects local users on systems running vulnerable versions of the Linux kernel prior to 2.6.36.2.
What kind of attack does CVE-2010-3859 facilitate?
CVE-2010-3859 facilitates a local privilege escalation attack through a crafted sendmsg call.
Which versions of the Linux kernel are vulnerable to CVE-2010-3859?
Versions of the Linux kernel before 2.6.36.2 are vulnerable to CVE-2010-3859.