QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2010-3859

Back to search

CVE-2010-3859

Published: Dec 29, 2010

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple integer signedness errors in the TIPC implementation in the Linux kernel before 2.6.36.2 allow local users to gain privileges via a crafted sendmsg call that triggers a heap-based buffer overflow, related to the tipc_msg_build function in net/tipc/msg.c and the verify_iovec function in net/core/iovec.c.

VendorProductVersions

n/a

n/a

affected
n/a

References

42789
third-party-advisory
x_refsource_SECUNIA
ADV-2011-0024
vdb-entry
x_refsource_VUPEN
RHSA-2011:0004
vendor-advisory
x_refsource_REDHAT
[netdev] 20101021 TIPC security issues
mailing-list
x_refsource_MLIST
46397
third-party-advisory
x_refsource_SECUNIA
42963
third-party-advisory
x_refsource_SECUNIA
44354
vdb-entry
x_refsource_BID
RHSA-2011:0162
vendor-advisory
x_refsource_REDHAT
ADV-2011-0168
vdb-entry
x_refsource_VUPEN
MDVSA-2011:029
vendor-advisory
x_refsource_MANDRIVA
DSA-2126
vendor-advisory
x_refsource_DEBIAN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now