CVE - CVE-2010-2959

CVE-ID
CVE-2010-2959	Learn more at National Vulnerability Database (NVD) • Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings
Description
Integer overflow in net/can/bcm.c in the Controller Area Network (CAN) implementation in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6, and 2.6.35.x before 2.6.35.4 allows attackers to execute arbitrary code or cause a denial of service (system crash) via crafted CAN traffic.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MLIST:[oss-security] 20100820 kernel: can: add limit for nframes and clean up signed/unsigned variables URL:http://www.openwall.com/lists/oss-security/2010/08/20/2 MISC:http://jon.oberheide.org/files/i-can-haz-modharden.c CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=5b75c4973ce779520b9d1e392483207d6f842cde CONFIRM:http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.53 CONFIRM:http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.21 CONFIRM:http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34.6 CONFIRM:http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35.4 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=625699 DEBIAN:DSA-2094 URL:http://www.debian.org/security/2010/dsa-2094 FEDORA:FEDORA-2010-13903 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-September/046947.html MANDRIVA:MDVSA-2010:198 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 SUSE:SUSE-SA:2010:041 URL:http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html SUSE:SUSE-SA:2010:040 URL:http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html SUSE:SUSE-SA:2011:007 URL:http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html BID:42585 URL:http://www.securityfocus.com/bid/42585 SECUNIA:41512 URL:http://secunia.com/advisories/41512 VUPEN:ADV-2010-2430 URL:http://www.vupen.com/english/advisories/2010/2430 VUPEN:ADV-2011-0298 URL:http://www.vupen.com/english/advisories/2011/0298
Assigning CNA
N/A
Date Entry Created
20100804	Disclaimer: The entry creation date may reflect when the CVE-ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20100804)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE list, which standardizes names for security problems.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org

Common Vulnerabilities and Exposures

CVE-2010-2959