Veille CVE
CVE-2010-3904
7.8 Élevée Exploitée activementCatalogue CISA KEV — Linux Kernel Improper Input Validation Vulnerability
Ajoutée le 12/05/2023 · Échéance de correction (agences US) : 02/06/2023
Action requise : The impacted product is end-of-life and should be disconnected if still in use.
Description
The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.
Produits concernés
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 7.8 Élevée | nvd@nist.gov (NVD) | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| 3.1 | 7.8 Élevée | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| 2.0 | 7.2 Élevée | nvd@nist.gov (NVD) | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Faiblesses (CWE)
Références
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=799c10559d60f159ab2232203f222f18fa3c4a5f Broken Link
- http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00008.html Mailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00004.html Mailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html Mailing ListThird Party Advisory
- http://packetstormsecurity.com/files/155751/vReliable-Datagram-Sockets-RDS-rds_page_copy_user-Privilege-Escalation.html ExploitThird Party AdvisoryVDB Entry
- http://secunia.com/advisories/46397 Broken LinkThird Party Advisory
- http://securitytracker.com/id?1024613 Broken LinkThird Party AdvisoryVDB Entry
- http://www.kb.cert.org/vuls/id/362983 Third Party AdvisoryUS Government Resource
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36 Broken Link
- http://www.redhat.com/support/errata/RHSA-2010-0792.html Broken LinkThird Party Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0842.html Broken LinkThird Party Advisory
- http://www.securityfocus.com/archive/1/520102/100/0/threaded Broken LinkThird Party AdvisoryVDB Entry
- http://www.ubuntu.com/usn/USN-1000-1 Third Party Advisory
- http://www.vmware.com/security/advisories/VMSA-2011-0012.html Third Party Advisory
- http://www.vsecurity.com/download/tools/linux-rds-exploit.c Broken Link
- http://www.vsecurity.com/resources/advisory/20101019-1/ Broken Link
- http://www.vupen.com/english/advisories/2011/0298 Broken LinkThird Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=642896 Issue TrackingPatchThird Party Advisory
- https://www.exploit-db.com/exploits/44677/ ExploitThird Party AdvisoryVDB Entry
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=799c10559d60f159ab2232203f222f18fa3c4a5f Broken Link
- http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00008.html Mailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00004.html Mailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html Mailing ListThird Party Advisory
- http://packetstormsecurity.com/files/155751/vReliable-Datagram-Sockets-RDS-rds_page_copy_user-Privilege-Escalation.html ExploitThird Party AdvisoryVDB Entry
- http://secunia.com/advisories/46397 Broken LinkThird Party Advisory
- http://securitytracker.com/id?1024613 Broken LinkThird Party AdvisoryVDB Entry
- http://www.kb.cert.org/vuls/id/362983 Third Party AdvisoryUS Government Resource
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36 Broken Link
- http://www.redhat.com/support/errata/RHSA-2010-0792.html Broken LinkThird Party Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0842.html Broken LinkThird Party Advisory
- http://www.securityfocus.com/archive/1/520102/100/0/threaded Broken LinkThird Party AdvisoryVDB Entry
- http://www.ubuntu.com/usn/USN-1000-1 Third Party Advisory
- http://www.vmware.com/security/advisories/VMSA-2011-0012.html Third Party Advisory
- http://www.vsecurity.com/download/tools/linux-rds-exploit.c Broken Link
- http://www.vsecurity.com/resources/advisory/20101019-1/ Broken Link
- http://www.vupen.com/english/advisories/2011/0298 Broken LinkThird Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=642896 Issue TrackingPatchThird Party Advisory
- https://www.exploit-db.com/exploits/44677/ ExploitThird Party AdvisoryVDB Entry
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-3904 US Government Resource