Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.9
CVSSv2

CVE-2010-4175

Published: 11/01/2011 Updated: 17/08/2017
CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9
VMScore: 436
Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C
Subscribe to Linux Kernel

Vulnerability Summary

Integer overflow in the rds_cmsg_rdma_args function (net/rds/rdma.c) in Linux kernel 2.6.35 allows local users to cause a denial of service (crash) and possibly trigger memory corruption via a crafted Reliable Datagram Sockets (RDS) request, a different vulnerability than CVE-2010-3865.

Vulnerable Product Search on Vulmon Subscribe to Product

linux linux kernel 2.6.35

Vendor Advisories

Ubuntu Security Notice: linux-fsl-imx51 vulnerabilities
Multiple kernel flaws have been fixed ...
Ubuntu Security Notice: linux, linux-ec2 vulnerabilities
Multiple kernel vulnerabilities ...
Ubuntu Security Notice: linux-lts-backport-maverick vulnerabilities
Multiple kernel flaws ...
Ubuntu Security Notice: linux-mvl-dove vulnerabilities
An attacker could send crafted input to the kernel and cause it to crash ...
Ubuntu Security Notice: linux, linux-ec2 vulnerabilities
Multiple kernel vulnerablilities ...
Ubuntu Security Notice: linux-ti-omap4 vulnerabilities
Multiple kernel flaws have been fixed ...

Exploits

Exploit DB: Ubuntu Security Notice USN-1202-1
Ubuntu Security Notice 1202-1 - Dan Rosenberg discovered that several network ioctls did not clear kernel memory correctly A local user could exploit this to read kernel stack memory, leading to a loss of privacy Brad Spengler discovered that stack memory for new a process was not correctly calculated A local attacker could exploit this to crash ...

References

CWE-189http://www.openwall.com/lists/oss-security/2010/11/17/8http://www.openwall.com/lists/oss-security/2010/11/18/1http://marc.info/?l=linux-netdev&m=129001184803080&w=2http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.htmlhttp://secunia.com/advisories/42801http://secunia.com/advisories/42778http://www.vupen.com/english/advisories/2011/0012http://www.vupen.com/english/advisories/2011/0124http://secunia.com/advisories/42932http://www.securityfocus.com/bid/44921http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.htmlhttp://www.vupen.com/english/advisories/2011/0298https://exchange.xforce.ibmcloud.com/vulnerabilities/64618https://nvd.nist.govhttps://usn.ubuntu.com/1204-1/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
HTML injectionCVE-2024-35894SQLCVE-2024-5105CVE-2014-100005CVE-2024-35895unauthorizedCVE-2024-22120CVE-2024-35890
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook