ByteOS Network

CVE Vulnerability Details :

CVE-2010-3437

PUBLISHED

More Info Official Page

Assigner-redhat

Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749

Published At-04 Oct, 2010 | 20:00

Updated At-07 Aug, 2024 | 03:11

▼CVE Numbering Authority (CNA)

Integer signedness error in the pkt_find_dev_from_minor function in drivers/block/pktcdvd.c in the Linux kernel before 2.6.36-rc6 allows local users to obtain sensitive information from kernel memory or cause a denial of service (invalid pointer dereference and system crash) via a crafted index value in a PKT_CTRL_CMD_STATUS ioctl call.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html	vendor-advisory x_refsource_SUSE
http://secunia.com/advisories/42778	third-party-advisory x_refsource_SECUNIA
http://www.ubuntu.com/usn/USN-1000-1	vendor-advisory x_refsource_UBUNTU
http://secunia.com/advisories/42801	third-party-advisory x_refsource_SECUNIA
http://www.securityfocus.com/bid/43551	vdb-entry x_refsource_BID
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html	vendor-advisory x_refsource_SUSE
https://bugzilla.redhat.com/show_bug.cgi?id=638085	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html	vendor-advisory x_refsource_SUSE
http://secunia.com/advisories/42932	third-party-advisory x_refsource_SECUNIA
http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.36-rc6	x_refsource_CONFIRM
http://www.exploit-db.com/exploits/15150/	exploit x_refsource_EXPLOIT-DB
http://www.openwall.com/lists/oss-security/2010/09/28/2	mailing-list x_refsource_MLIST
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=252a52aa4fa22a668f019e55b3aac3ff71ec1c29	x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2011/0124	vdb-entry x_refsource_VUPEN
http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html	vendor-advisory x_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html	vendor-advisory x_refsource_SUSE
http://www.redhat.com/support/errata/RHSA-2010-0842.html	vendor-advisory x_refsource_REDHAT
http://www.vupen.com/english/advisories/2011/0298	vdb-entry x_refsource_VUPEN
http://www.mandriva.com/security/advisories?name=MDVSA-2011:051	vendor-advisory x_refsource_MANDRIVA
http://www.openwall.com/lists/oss-security/2010/09/28/6	mailing-list x_refsource_MLIST
http://jon.oberheide.org/files/cve-2010-3437.c	x_refsource_MISC
http://www.vupen.com/english/advisories/2011/0012	vdb-entry x_refsource_VUPEN
http://www.mandriva.com/security/advisories?name=MDVSA-2011:029	vendor-advisory x_refsource_MANDRIVA
http://www.debian.org/security/2010/dsa-2126	vendor-advisory x_refsource_DEBIAN

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://secunia.com/advisories/42778

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.ubuntu.com/usn/USN-1000-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://secunia.com/advisories/42801

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.securityfocus.com/bid/43551

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=638085

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://secunia.com/advisories/42932

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.36-rc6

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.exploit-db.com/exploits/15150/

Resource:

exploit

x_refsource_EXPLOIT-DB

Hyperlink: http://www.openwall.com/lists/oss-security/2010/09/28/2

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=252a52aa4fa22a668f019e55b3aac3ff71ec1c29

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.vupen.com/english/advisories/2011/0124

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0842.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.vupen.com/english/advisories/2011/0298

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2011:051

Resource:

vendor-advisory

x_refsource_MANDRIVA

Hyperlink: http://www.openwall.com/lists/oss-security/2010/09/28/6

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://jon.oberheide.org/files/cve-2010-3437.c

Resource:

x_refsource_MISC

Hyperlink: http://www.vupen.com/english/advisories/2011/0012

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2011:029

Resource:

vendor-advisory

x_refsource_MANDRIVA

Hyperlink: http://www.debian.org/security/2010/dsa-2126

Resource:

vendor-advisory

x_refsource_DEBIAN

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html	vendor-advisory x_refsource_SUSE x_transferred
http://secunia.com/advisories/42778	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.ubuntu.com/usn/USN-1000-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://secunia.com/advisories/42801	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.securityfocus.com/bid/43551	vdb-entry x_refsource_BID x_transferred
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html	vendor-advisory x_refsource_SUSE x_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=638085	x_refsource_CONFIRM x_transferred
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html	vendor-advisory x_refsource_SUSE x_transferred
http://secunia.com/advisories/42932	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.36-rc6	x_refsource_CONFIRM x_transferred
http://www.exploit-db.com/exploits/15150/	exploit x_refsource_EXPLOIT-DB x_transferred
http://www.openwall.com/lists/oss-security/2010/09/28/2	mailing-list x_refsource_MLIST x_transferred
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=252a52aa4fa22a668f019e55b3aac3ff71ec1c29	x_refsource_CONFIRM x_transferred
http://www.vupen.com/english/advisories/2011/0124	vdb-entry x_refsource_VUPEN x_transferred
http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html	vendor-advisory x_refsource_SUSE x_transferred
http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html	vendor-advisory x_refsource_SUSE x_transferred
http://www.redhat.com/support/errata/RHSA-2010-0842.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.vupen.com/english/advisories/2011/0298	vdb-entry x_refsource_VUPEN x_transferred
http://www.mandriva.com/security/advisories?name=MDVSA-2011:051	vendor-advisory x_refsource_MANDRIVA x_transferred
http://www.openwall.com/lists/oss-security/2010/09/28/6	mailing-list x_refsource_MLIST x_transferred
http://jon.oberheide.org/files/cve-2010-3437.c	x_refsource_MISC x_transferred
http://www.vupen.com/english/advisories/2011/0012	vdb-entry x_refsource_VUPEN x_transferred
http://www.mandriva.com/security/advisories?name=MDVSA-2011:029	vendor-advisory x_refsource_MANDRIVA x_transferred
http://www.debian.org/security/2010/dsa-2126	vendor-advisory x_refsource_DEBIAN x_transferred