CVEvulnerability
CVE-2010-4243
4.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-01-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.9 MEDIUM — AV:L/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-400
Description
fs/exec.c in the Linux kernel before 2.6.37 does not enable the OOM Killer to assess use of stack memory by arrays representing the (1) arguments and (2) environment, which allows local users to cause a denial of service (memory consumption) via a crafted exec system call, aka an "OOM dodging issue," a related issue to CVE-2010-3858.
Affected configurations
• linux linux kernel (< 2.6.37)
Related
Weakness · CWE (1)
- CWE-400 Uncontrolled Resource Consumption weakness
References
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3c77f845722158206a7209c45ccddc264d19319c git.kernel.org
- http://grsecurity.net/~spender/64bit_dos.c Broken Link
- http://linux.derkeiler.com/Mailing-Lists/Kernel/2010-11/msg13278.html Broken Link
- http://lkml.org/lkml/2010/8/27/429 Mailing List, Patch, Third Party Advisory
- http://lkml.org/lkml/2010/8/29/206 Mailing List, Patch, Third Party Advisory
- http://lkml.org/lkml/2010/8/30/138 Mailing List, Patch, Third Party Advisory
- http://lkml.org/lkml/2010/8/30/378 Mailing List, Third Party Advisory
- http://openwall.com/lists/oss-security/2010/11/22/15 Mailing List, Third Party Advisory
- http://openwall.com/lists/oss-security/2010/11/22/6 Mailing List, Third Party Advisory
- http://secunia.com/advisories/42884 Third Party Advisory
- http://secunia.com/advisories/46397 Third Party Advisory
- http://www.exploit-db.com/exploits/15619 Exploit, Third Party Advisory, VDB Entry
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37 Broken Link
- http://www.redhat.com/support/errata/RHSA-2011-0017.html Third Party Advisory
- http://www.securityfocus.com/archive/1/520102/100/0/threaded Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/45004 Third Party Advisory, VDB Entry
- http://www.vmware.com/security/advisories/VMSA-2011-0012.html Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=625688 Issue Tracking, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64700 VDB Entry
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3c77f845722158206a7209c45ccddc264d19319c git.kernel.org
- http://grsecurity.net/~spender/64bit_dos.c Broken Link
- http://linux.derkeiler.com/Mailing-Lists/Kernel/2010-11/msg13278.html Broken Link
- http://lkml.org/lkml/2010/8/27/429 Mailing List, Patch, Third Party Advisory
- http://lkml.org/lkml/2010/8/29/206 Mailing List, Patch, Third Party Advisory
- http://lkml.org/lkml/2010/8/30/138 Mailing List, Patch, Third Party Advisory
- http://lkml.org/lkml/2010/8/30/378 Mailing List, Third Party Advisory
- http://openwall.com/lists/oss-security/2010/11/22/15 Mailing List, Third Party Advisory
- http://openwall.com/lists/oss-security/2010/11/22/6 Mailing List, Third Party Advisory
- http://secunia.com/advisories/42884 Third Party Advisory
- http://secunia.com/advisories/46397 Third Party Advisory
- http://www.exploit-db.com/exploits/15619 Exploit, Third Party Advisory, VDB Entry
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37 Broken Link
- http://www.redhat.com/support/errata/RHSA-2011-0017.html Third Party Advisory
- http://www.securityfocus.com/archive/1/520102/100/0/threaded Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/45004 Third Party Advisory, VDB Entry
- http://www.vmware.com/security/advisories/VMSA-2011-0012.html Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=625688 Issue Tracking, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64700 VDB Entry