Out-of-bounds write in Linux kernel

1) Out-of-bounds write

EUVDB-ID: #VU92567

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2010-3859

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: No

Description

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to out-of-bounds write error. A local user can execute arbitrary code.

Mitigation

Install update from vendor's repository.

Vulnerable software versions

Linux kernel: All versions

CPE2.3

• cpe:2.3:o:linux_foundation:linux_kernel:*:*:*:*:*:*:*:*

External links

https://www.spinics.net/lists/netdev/msg145248.html
https://www.spinics.net/lists/netdev/msg145262.html
https://www.spinics.net/lists/netdev/msg145263.html
https://www.spinics.net/lists/netdev/msg145265.html
https://www.spinics.net/lists/netdev/msg145264.html
https://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36.2
https://bugzilla.redhat.com/show_bug.cgi?id=645867
https://www.openwall.com/lists/oss-security/2010/10/22/2
https://www.spinics.net/lists/netdev/msg145352.html
https://www.spinics.net/lists/netdev/msg145247.html
https://www.openwall.com/lists/oss-security/2010/10/22/5
https://www.redhat.com/support/errata/RHSA-2011-0004.html
https://www.debian.org/security/2010/dsa-2126
https://www.vupen.com/english/advisories/2011/0024
https://secunia.com/advisories/42789
https://www.securityfocus.com/bid/44354
https://secunia.com/advisories/42963
https://www.redhat.com/support/errata/RHSA-2011-0162.html
https://www.vupen.com/english/advisories/2011/0168
https://www.mandriva.com/security/advisories?name=MDVSA-2011:029
https://secunia.com/advisories/46397
https://www.vmware.com/security/advisories/VMSA-2011-0012.html
https://marc.info/?l=linux-netdev&m=128770476511716&w=2
https://www.securityfocus.com/archive/1/520102/100/0/threaded
https://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=253eacc070b114c2ec1f81b067d2fed7305467b0
https://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8acfe468b0384e834a303f08ebc4953d72fb690a

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.