PT-2010-4437 · Linux+1 · Linux Kernel+1

Kees Cook · Publicado 2010-11-10 · Atualizado 2020-08-14 · CVE-2010-2962

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.36

Description The issue is related to the Graphics Execution Manager (GEM) in the Intel i915 driver in the Direct Rendering Manager (DRM) subsystem. It does not properly validate pointers to blocks of memory, allowing local users to write to arbitrary kernel memory locations and gain privileges via crafted use of the ioctl interface, particularly with pwrite and pread operations.

Recommendations For Linux kernel versions prior to 2.6.36, update to version 2.6.36 or later to resolve the issue.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2010-2962

RHSA-2010:0842

RHSA-2010:0958

RHSA-2010_0842

Produtos afetados

Linux Kernel

Red Hat

Referências · 58

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/rds_rds_page_copy_user_priv_esc.rb · Exploit
• https://linux.oracle.com/errata/ELSA-2011-0007.html · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2010-3301 · Nota
• https://access.redhat.com/security/cve/CVE-2010-3081 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=621435 · Nota
• http://vupen.com/english/advisories/2011/0070 · Nota
• http://exploit-db.com/exploits/15150 · Nota
• https://access.redhat.com/security/cve/CVE-2010-3084 · Nota
• http://secunia.com/advisories/42745 · Nota
• https://bdu.fstec.ru/vul/2015-04590 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2010-3432 · Nota
• https://access.redhat.com/security/cve/CVE-2010-2962 · Nota
• http://secunia.com/advisories/42758 · Nota
• http://packetstormsecurity.com/files/155751/vReliable-Datagram-Sockets-RDS-rds_page_copy_user-Privilege-Escalation.html · Nota
• http://jon.oberheide.org/files/cve-2010-3437.c · Nota