QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2010-3858

Back to search

CVE-2010-3858

Published: Nov 30, 2010

Modified: Aug 7, 2024

PUBLISHED

Description

The setup_arg_pages function in fs/exec.c in the Linux kernel before 2.6.36, when CONFIG_STACK_GROWSDOWN is used, does not properly restrict the stack memory consumption of the (1) arguments and (2) environment for a 32-bit application on a 64-bit platform, which allows local users to cause a denial of service (system crash) via a crafted exec system call, a related issue to CVE-2010-2240.

VendorProductVersions

n/a

n/a

affected
n/a

References

42789
third-party-advisory
x_refsource_SECUNIA
ADV-2011-0024
vdb-entry
x_refsource_VUPEN
RHSA-2011:0004
vendor-advisory
x_refsource_REDHAT
46397
third-party-advisory
x_refsource_SECUNIA
USN-1041-1
vendor-advisory
x_refsource_UBUNTU
RHSA-2010:0958
vendor-advisory
x_refsource_REDHAT
MDVSA-2010:257
vendor-advisory
x_refsource_MANDRIVA
15619
exploit
x_refsource_EXPLOIT-DB
42758
third-party-advisory
x_refsource_SECUNIA
44301
vdb-entry
x_refsource_BID
ADV-2011-0070
vdb-entry
x_refsource_VUPEN
DSA-2126
vendor-advisory
x_refsource_DEBIAN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now