CVE-2010-0307
5.5 Medium
AI Score
Confidence
High
4.7 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:N/I:N/A:C
0.0004 Low
EPSS
Percentile
0.4%
The load_elf_binary function in fs/binfmt_elf.c in the Linux kernel before 2.6.32.8 on the x86_64 platform does not ensure that the ELF interpreter is available before a call to the SET_PERSONALITY macro, which allows local users to cause a denial of service (system crash) via a 32-bit application that attempts to execute a 64-bit application and then triggers a segmentation fault, as demonstrated by amd64_killer, related to the flush_old_exec function.
References
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=221af7f87b97431e3ee21ce4b0e77d5411cf1549
lists.fedoraproject.org/pipermail/package-announce/2010-February/035159.html
lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html
marc.info/?l=linux-mm&m=126466407724382&w=2
marc.info/?t=126466700200002&r=1&w=2
secunia.com/advisories/38492
secunia.com/advisories/38779
secunia.com/advisories/38922
secunia.com/advisories/39649
secunia.com/advisories/43315
support.avaya.com/css/P8/documents/100088287
www.debian.org/security/2010/dsa-1996
www.globalsecuritymag.com/Vigil-nce-Linux-kernel-denial-of%2C20100202%2C15754.html
www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.8
www.mandriva.com/security/advisories?name=MDVSA-2010:066
www.openwall.com/lists/oss-security/2010/02/01/1
www.openwall.com/lists/oss-security/2010/02/01/5
www.openwall.com/lists/oss-security/2010/02/04/1
www.openwall.com/lists/oss-security/2010/02/04/9
www.redhat.com/support/errata/RHSA-2010-0398.html
www.redhat.com/support/errata/RHSA-2010-0771.html
www.securityfocus.com/archive/1/516397/100/0/threaded
www.securityfocus.com/bid/38027
www.ubuntu.com/usn/USN-914-1
www.vmware.com/security/advisories/VMSA-2011-0003.html
www.vupen.com/english/advisories/2010/0638
bugzilla.redhat.com/show_bug.cgi?id=560547
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10870
rhn.redhat.com/errata/RHSA-2010-0146.html
Social References
More
Related
5.5 Medium
AI Score
Confidence
High
4.7 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:N/I:N/A:C
0.0004 Low
EPSS
Percentile
0.4%