PT-2010-4535 · Linux+1 · Linux Kernel+1

Eugene Teo · Published 2010-09-29 · Updated 2023-02-13 · CVE-2010-3084

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.36-rc4

Description A buffer overflow issue exists in the niu get ethtool tcam all function in drivers/net/niu.c, allowing local users to cause a denial of service or possibly have other unspecified impacts via the ETHTOOL GRXCLSRLALL ethtool command.

Recommendations For Linux kernel versions prior to 2.6.36-rc4, update to version 2.6.36-rc4 or later to resolve the issue.

Exploit

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2010-3084

RHSA-2010:0842

RHSA-2010_0842

Affected Products

Linux Kernel

Red Hat

References · 52

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/rds_rds_page_copy_user_priv_esc.rb · Exploit
• https://linux.oracle.com/errata/ELSA-2011-0007.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04590 · Security Note
• https://bdu.fstec.ru/vul/2015-04609 · Security Note
• http://redhat.com/support/errata/RHSA-2010-0842.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06111 · Security Note
• https://bdu.fstec.ru/vul/2015-06109 · Security Note
• https://bdu.fstec.ru/vul/2015-06110 · Security Note
• https://bdu.fstec.ru/vul/2015-06103 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2010-3084 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2010-3081 · Security Note
• http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.36-rc4 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06106 · Security Note
• https://bdu.fstec.ru/vul/2015-04589 · Security Note
• https://bdu.fstec.ru/vul/2015-06107 · Security Note