CVE-2010-3873: Buffer Overflow
Description of problem: Due to bad parsing of malformed X.25 facilities, a remote attacker can cause a kernel panic due to heap corruption (assuming both parties are communicating using X.25).
Reference: http://www.spinics.net/lists/netdev/msg145786.html http://www.spinics.net/lists/netdev/msg145873.html
Acknowledgements:
Red Hat would like to thank Dan Rosenberg for reporting this issue.
Other sources
The X.25 implementation in the Linux kernel before 2.6.36.2 does not properly parse facilities, which allows remote attackers to cause a denial of service (heap memory corruption and panic) or possibly have unspecified other impact via malformed (1) X25FACCALLINGAE or (2) X25FACCALLEDAE data, related to net/x25/x25facilities.c and net/x25/x25in.c, a different vulnerability than CVE-2010-4164.
— Launchpad
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3873?
CVE-2010-3873 is classified as a high severity vulnerability due to the potential for remote kernel panic.
How does CVE-2010-3873 affect systems?
CVE-2010-3873 can lead to heap corruption and cause a kernel panic when malformed X.25 facilities are processed.
Who is affected by CVE-2010-3873?
CVE-2010-3873 affects multiple versions of the Linux kernel and specific distributions including Debian, openSUSE, and SUSE Linux Enterprise Server.
How do I fix CVE-2010-3873?
To remediate CVE-2010-3873, you should upgrade to a patched version of the Linux kernel as provided by your distribution.
Can CVE-2010-3873 be exploited remotely?
Yes, CVE-2010-3873 can be exploited remotely by an attacker communicating over X.25.