Published: 30/12/2010 Updated: 13/02/2023

CVSS v2 Base Score: 6.9 | Impact Score: 10 | Exploitability Score: 3.4

VMScore: 695

Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C

Stack-based buffer overflow in the econet_sendmsg function in net/econet/af_econet.c in the Linux kernel prior to 2.6.36.2, when an econet address is configured, allows local users to gain privileges by providing a large number of iovec structures.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
suse linux enterprise server 10
suse linux enterprise server 9
suse linux enterprise desktop 10
suse linux enterprise software development kit 10
suse linux enterprise real time extension 11
debian debian linux 5.0
canonical ubuntu linux 10.10
canonical ubuntu linux 9.10
canonical ubuntu linux 8.04
canonical ubuntu linux 10.04
canonical ubuntu linux 6.06

Multiple kernel flaws ...

An attacker could send crafted input to the kernel and cause it to crash ...

Multiple security flaws have been fixed in the OMAP4 port of the Linux kernel ...

Multiple kernel flaws ...

The Linux kernel could be made to run unauthorized programs with administrator privileges ...

/* * half-nelsonc * * Linux Kernel < 26362 Econet Privilege Escalation Exploit * Jon Oberheide <jon@oberheideorg> * jonoberheideorg * * Information: * * cvemitreorg/cgi-bin/cvenamecgi?name=CVE-2010-3848 * * Stack-based buffer overflow in the econet_sendmsg function in * net/econet/af_econetc in ...

This exploit leverages three vulnerabilities to escalate privileges The primary vulnerability is a kernel stack overflow, not a stack buffer overflow as the CVE description incorrectly states This may be the first public exploit for a kernel stack overflow, and it turns out to be a bit tricky due to some particulars of the econet vulnerability I ...

CWE-787 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36.2 http://openwall.com/lists/oss-security/2010/11/30/1 https://bugzilla.redhat.com/show_bug.cgi?id=644156 http://www.ubuntu.com/usn/USN-1023-1 http://www.debian.org/security/2010/dsa-2126 http://www.mandriva.com/security/advisories?name=MDVSA-2010:257 http://www.vupen.com/english/advisories/2011/0213 http://secunia.com/advisories/43056 http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00007.html http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html http://www.vupen.com/english/advisories/2011/0375 http://secunia.com/advisories/43291 http://www.vupen.com/english/advisories/2011/0298 http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a27e13d370415add3487949c60810e36069a23a6 https://nvd.nist.gov https://www.exploit-db.com/exploits/17787/https://usn.ubuntu.com/1083-1/

CVE-2010-3848

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect