PT-2010-4438 · Linux · Linux Kernel

Kees Cook · Publicado 2010-11-26 · Atualizado 2020-08-14 · CVE-2010-2963

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Média

Vetor base

AV:L/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.36

Description The issue concerns a memory copy operation in the Video4Linux (V4L) implementation that does not validate the destination, allowing local users to write to arbitrary kernel memory locations and gain privileges. This can be achieved via a VIDIOCSTUNER ioctl call on a /dev/video device, followed by a VIDIOCSMICROCODE ioctl call on this device.

Recommendations For Linux kernel versions prior to 2.6.36, update to version 2.6.36 or later to resolve the issue.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2010-2963

DSA-2126-1

Produtos afetados

Linux Kernel

Referências · 16

• 🔥 https://exploit-db.com/exploits/15344 · Exploit
• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=642465 · Exploit
• 🔥 http://outflux.net/blog/archives/2010/10/19/cve-2010-2963-v4l-compat-exploit · Exploit
• http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36 · Nota
• http://securityfocus.com/bid/44242 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-2963 · Nota de Segurança
• http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00008.html · Aviso do Fabricante
• http://secunia.com/advisories/42745 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00004.html · Aviso do Fabricante
• http://vupen.com/english/advisories/2010/3321 · Nota
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3e645d6b485446c54c6745c5e2cf5c528fe4deec · Nota
• http://securitytracker.com/id?1024710 · Nota
• http://mandriva.com/security/advisories?name=MDVSA-2010:257 · Aviso do Fabricante
• http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.html · Aviso do Fabricante
• http://ubuntu.com/usn/USN-1000-1 · Aviso do Fabricante