Integer overflow

2010-09-2917:00:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Integer overflow in the ethtool_get_rxnfc function in net/core/ethtool.c in the Linux kernel before 2.6.33.7 on 32-bit platforms allows local users to cause a denial of service or possibly have unspecified other impact via an ETHTOOL_GRXCLSRLALL ethtool command with a large info.rule_cnt value that triggers a buffer overflow, a different vulnerability than CVE-2010-3084.

CPENameOperatorVersion
ubuntu_linuxeq10.10
ubuntu_linuxeq9.04
ubuntu_linuxeq9.10
ubuntu_linuxeq8.04
ubuntu_linuxeq10.04
ubuntu_linuxeq6.06
linux_kernellt2.6.33.7
linux_enterprise_desktopeq11 sp1
linux_enterprise_servereq11 sp1

Name	Operator	Version
ubuntu_linux	eq	10.10
ubuntu_linux	eq	9.04
ubuntu_linux	eq	9.10
ubuntu_linux	eq	8.04
ubuntu_linux	eq	10.04
ubuntu_linux	eq	6.06
linux_kernel	lt	2.6.33.7
linux_enterprise_desktop	eq	11 sp1
linux_enterprise_server	eq	11 sp1