PT-2010-4434 · Linux · Linux Kernel

Ben Hawkes

+1

·

Publicado

2010-09-08

·

Atualizado

2026-02-10

·

CVE-2010-2959

CVSS v2.0

7.2

Alta

VetorAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.27.53 Linux kernel versions 2.6.32.x prior to 2.6.32.21 Linux kernel versions 2.6.34.x prior to 2.6.34.6 Linux kernel versions 2.6.35.x prior to 2.6.35.4
Description The issue is related to an integer overflow in the Controller Area Network (CAN) implementation. This can be exploited by attackers via crafted CAN traffic, potentially allowing them to execute arbitrary code or cause a denial of service, which may result in a system crash.
Recommendations For Linux kernel versions prior to 2.6.27.53, update to version 2.6.27.53 or later. For Linux kernel versions 2.6.32.x prior to 2.6.32.21, update to version 2.6.32.21 or later. For Linux kernel versions 2.6.34.x prior to 2.6.34.6, update to version 2.6.34.6 or later. For Linux kernel versions 2.6.35.x prior to 2.6.35.4, update to version 2.6.35.4 or later.

Exploit

Correção

Integer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

CVE-2010-2959
DSA-2094-1

Produtos afetados

Linux Kernel