ID:4490 - Exploit for Resource management error in Linux kernel - CVE-2010-4243

 
Main Vulnerability Database Exploits ID:4490 - Exploit for Resource management error in Linux kernel - CVE-2010-4243

ID:4490 - Exploit for Resource management error in Linux kernel - CVE-2010-4243

Published: August 11, 2020


Vulnerability identifier: #VU45418
Vulnerability risk: Medium
CVE-ID: CVE-2010-4243
CWE-ID: CWE-399
Exploitation vector: Remote access
Vulnerable software:
Linux kernel

Link to public exploit:


Vulnerability description

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

fs/exec.c in the Linux kernel before 2.6.37 does not enable the OOM Killer to assess use of stack memory by arrays representing the (1) arguments and (2) environment, which allows local users to cause a denial of service (memory consumption) via a crafted exec system call, aka an "OOM dodging issue," a related issue to CVE-2010-3858.


Remediation

Install update from vendor's website.