PT-2010-5429 · Linux+1 · Linux Kernel+1

Tavis Ormandy

·

CVE-2010-4346

·

Publicado

2010-12-22

·

Atualizado

2023-02-13

CVSS v2.0

2.1

Baixa

VetorAV:L/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.37-rc6
Description The issue is related to the install special mapping function in mm/mmap.c, which fails to make an expected security file mmap function call. This allows local users to bypass intended mmap min addr restrictions and possibly conduct NULL pointer dereference attacks via a crafted assembly-language application.
Recommendations For Linux kernel versions prior to 2.6.37-rc6, update to version 2.6.37-rc6 or later to resolve the issue.

Correção

NULL Pointer Dereference

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

CVE-2010-4346
DSA-2153-1
RHSA-2011:0330
RHSA-2011:0421
RHSA-2011:0429
RHSA-2011_0421
RHSA-2011_0429

Produtos afetados

Linux Kernel
Red Hat