CVE-2010-3437

🗓️ 04 Oct 2010 20:00:00Reported by redhatType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 158 Views🌐 WEB

Integer signedness error in pkt_find_dev_from_minor function in Linux kernel allows sensitive info leak or DoS via crafted index value in PKT_CTRL_CMD_STATUS ioctl call

Reporter	Title	Published	Views	Family All 76
zdt	Linux Kernel < 2.6.36-rc6 pktcdvd Kernel Memory Disclosure	30 Sep 201000:00	–	zdt
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
Circl	CVE-2010-3437	29 Sep 201000:00	–	circl
Cvelist	CVE-2010-3437	4 Oct 201020:00	–	cvelist
Debian	[SECURITY] [DSA 2126-1] New Linux 2.6.26 packages fix several issues	27 Nov 201004:49	–	debian
Tenable Nessus	Debian DSA-2126-1 : linux-2.6 - privilege escalation/denial of service/information leak	29 Nov 201000:00	–	nessus
Tenable Nessus	Oracle Linux 5 : Unbreakable enterprise kernel (ELSA-2010-2011)	12 Jul 201300:00	–	nessus
Tenable Nessus	Oracle Linux 6 : kernel (ELSA-2011-0007)	12 Jul 201300:00	–	nessus
Tenable Nessus	RHEL 6 : kernel (RHSA-2010:0842)	18 Nov 201000:00	–	nessus

NVD

Node

linux linux_kernelRange<2.6.36

linux linux_kernelMatch2.6.36-

linux linux_kernelMatch2.6.36rc1

linux linux_kernelMatch2.6.36rc2

linux linux_kernelMatch2.6.36rc3

linux linux_kernelMatch2.6.36rc4

linux linux_kernelMatch2.6.36rc5

Node

opensuse opensuseMatch11.2

opensuse opensuseMatch11.3

suse linux_enterprise_desktopMatch10sp3

suse linux_enterprise_desktopMatch11sp1

suse linux_enterprise_real_time_extensionMatch11sp1

suse linux_enterprise_serverMatch9

suse linux_enterprise_serverMatch10sp3

suse linux_enterprise_serverMatch11sp1

suse linux_enterprise_software_development_kitMatch10sp3

Node

debian debian_linuxMatch5.0

Node

canonical ubuntu_linuxMatch6.06

canonical ubuntu_linuxMatch8.04-

canonical ubuntu_linuxMatch9.04

canonical ubuntu_linuxMatch9.10

canonical ubuntu_linuxMatch10.04-

canonical ubuntu_linuxMatch10.10

Source	Link
openwall	www.openwall.com/lists/oss-security/2010/09/28/2
secunia	www.secunia.com/advisories/42801
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
jon	www.jon.oberheide.org/files/cve-2010-3437.c
redhat	www.redhat.com/support/errata/RHSA-2010-0842.html
lists	www.lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html
exploit-db	www.exploit-db.com/exploits/15150/
debian	www.debian.org/security/2010/dsa-2126
ubuntu	www.ubuntu.com/usn/USN-1000-1
git	www.git.kernel.org/

Parameter	Position	Path	Description	CWE
dev_index	binary	/dev/pktcdvd/control	Kernel memory disclosure via crafted signed dev_index in PKT_CTRL_CMD_STATUS ioctl on pktcdvd device (/dev/pktcdvd/control); negative index allows dereferencing attacker-controlled memory.	CWE-476
command	binary	/dev/pktcdvd/control	Kernel memory disclosure via crafted signed dev_index in PKT_CTRL_CMD_STATUS ioctl on pktcdvd device (/dev/pktcdvd/control); negative index allows dereferencing attacker-controlled memory.	CWE-476

16 Jun 2026 23:22Current

5.6Medium risk

Vulners AI Score5.6

CVSS 26.6

EPSS0.02396