PT-2010-5122 · Linux+1 · Linux Kernel+1

Brad Spengler · Published 2010-11-30 · Updated 2023-02-13 · CVE-2010-3858

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.36

Description The issue is related to the setup arg pages function in fs/exec.c, which does not properly restrict stack memory consumption for 32-bit applications on 64-bit platforms when CONFIG STACK GROWSDOWN is used. This allows local users to cause a denial of service, resulting in a system crash, via a crafted exec system call.

Recommendations For Linux kernel versions prior to 2.6.36, update to version 2.6.36 or later to resolve the issue.

Exploit

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2010-3858

DSA-2126-1

RHSA-2010:0958

RHSA-2011:0004

RHSA-2011:0836

RHSA-2011_0004

RHSA-2011_0836

Affected Products

Linux Kernel

Red Hat

References · 70

• 🔥 http://exploit-db.com/exploits/15619 · Exploit
• 🔥 https://exploit-db.com/exploits/15619 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-3858 · Security Note
• https://bdu.fstec.ru/vul/2015-04590 · Security Note
• https://bdu.fstec.ru/vul/2015-08634 · Security Note
• http://mandriva.com/security/advisories?name=MDVSA-2010:257 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-08631 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=645222 · Patch
• http://redhat.com/support/errata/RHSA-2010-0958.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06252 · Security Note
• http://debian.org/security/2010/dsa-2126 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06240 · Security Note
• https://bdu.fstec.ru/vul/2015-06267 · Security Note
• https://bdu.fstec.ru/vul/2015-08636 · Security Note
• https://bdu.fstec.ru/vul/2015-06256 · Security Note