CVE-2010-3858
6.2 Medium
AI Score
Confidence
High
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
0.0004 Low
EPSS
Percentile
9.3%
The setup_arg_pages function in fs/exec.c in the Linux kernel before 2.6.36, when CONFIG_STACK_GROWSDOWN is used, does not properly restrict the stack memory consumption of the (1) arguments and (2) environment for a 32-bit application on a 64-bit platform, which allows local users to cause a denial of service (system crash) via a crafted exec system call, a related issue to CVE-2010-2240.
References
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1b528181b2ffa14721fb28ad1bd539fe1732c583
grsecurity.net/~spender/64bit_dos.c
secunia.com/advisories/42758
secunia.com/advisories/42789
secunia.com/advisories/46397
www.debian.org/security/2010/dsa-2126
www.exploit-db.com/exploits/15619
www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36
www.mandriva.com/security/advisories?name=MDVSA-2010:257
www.openwall.com/lists/oss-security/2010/10/21/1
www.openwall.com/lists/oss-security/2010/10/22/4
www.redhat.com/support/errata/RHSA-2010-0958.html
www.redhat.com/support/errata/RHSA-2011-0004.html
www.securityfocus.com/archive/1/520102/100/0/threaded
www.securityfocus.com/bid/44301
www.ubuntu.com/usn/USN-1041-1
www.vmware.com/security/advisories/VMSA-2011-0012.html
www.vupen.com/english/advisories/2011/0024
www.vupen.com/english/advisories/2011/0070
bugzilla.redhat.com/show_bug.cgi?id=645222
Social References
More
Related
6.2 Medium
AI Score
Confidence
High
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
0.0004 Low
EPSS
Percentile
9.3%