CVE-2010-2240

{"id": "CVE-2010-2240", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-09-03T20:00:03.560", "references": [{"url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=320b2b8de12698082609ebbc1a17165727f4c893", "source": "secalert@redhat.com"}, {"url": "http://lists.vmware.com/pipermail/security-announce/2011/000133.html", "source": "secalert@redhat.com"}, {"url": "http://securitytracker.com/id?1024344", "source": "secalert@redhat.com"}, {"url": "http://www.debian.org/security/2010/dsa-2094", "source": "secalert@redhat.com"}, {"url": "http://www.invisiblethingslab.com/resources/misc-2010/xorg-large-memory-attacks.pdf", "tags": ["Exploit"], "source": "secalert@redhat.com"}, {"url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.52", "source": "secalert@redhat.com"}, {"url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.19", "source": "secalert@redhat.com"}, {"url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34.4", "source": "secalert@redhat.com"}, {"url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35.2", "source": "secalert@redhat.com"}, {"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:172", "source": "secalert@redhat.com"}, {"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:198", "source": "secalert@redhat.com"}, {"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:051", "source": "secalert@redhat.com"}, {"url": "http://www.redhat.com/support/errata/RHSA-2010-0660.html", "source": "secalert@redhat.com"}, {"url": "http://www.redhat.com/support/errata/RHSA-2010-0670.html", "source": "secalert@redhat.com"}, {"url": "http://www.redhat.com/support/errata/RHSA-2010-0882.html", "source": "secalert@redhat.com"}, {"url": "http://www.securityfocus.com/archive/1/517739/100/0/threaded", "source": "secalert@redhat.com"}, {"url": "http://www.vmware.com/security/advisories/VMSA-2011-0007.html", "source": "secalert@redhat.com"}, {"url": "http://www.vmware.com/security/advisories/VMSA-2011-0009.html", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=606611", "source": "secalert@redhat.com"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13247", "source": "secalert@redhat.com"}, {"url": "https://rhn.redhat.com/errata/RHSA-2010-0661.html", "source": "secalert@redhat.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-94"}]}], "descriptions": [{"lang": "en", "value": "The do_anonymous_page function in mm/memory.c in the Linux kernel before 2.6.27.52, 2.6.32.x before 2.6.32.19, 2.6.34.x before 2.6.34.4, and 2.6.35.x before 2.6.35.2 does not properly separate the stack and the heap, which allows context-dependent attackers to execute arbitrary code by writing to the bottom page of a shared memory segment, as demonstrated by a memory-exhaustion attack against the X.Org X server."}, {"lang": "es", "value": "La funci\u00f3n do_anonymous_page en mm/memory.c en el kernel de Linux anterior v2.6.27.52, v2.6.32.x anterior v2.6.32.19, v2.6.34.x anterior v2.6.34.4, y v2.6.35.x anterior v2.6.35.2 no separa adecuadamente la pila y la cabecera, lo que permite a atacantes dependientes del contexto ejecutar c\u00f3digo de su elecci\u00f3n por escritura en el final de la p\u00e1gina de un segmento de memoria compartida, como qued\u00f3 demostrado con un ataque de memoria exhaustiva contra el servidor X.Org X."}], "lastModified": "2023-02-13T04:21:01.603", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AEA6DA66-4F42-4F29-A2C6-D65ABA86BEFE", "versionEndIncluding": "2.6.27.51"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.32:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "46568A0D-F374-4DAB-9B64-FCC74A9AA07B"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.32.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "084A2575-E5A6-43BD-8CE5-1EF628AA9ACB"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.32.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "041CE8AF-711C-496D-BDF2-B4AB655C0C8D"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.32.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FE192302-F569-4301-83F2-AEE020FB77B9"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.32.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2597A691-01B8-4FD2-AF71-D4BCC15C6F10"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.32.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "533A03F0-D7C4-42EF-BAD7-2B5A9A9D68EC"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.32.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EDBA84AD-CB87-418B-BBF7-8E910FB8FD5D"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.32.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A0FA9FA7-3BE3-415B-AA06-A2401B2AD8DC"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.32.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A93EFB49-0195-4471-9445-DA944CD55459"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.32.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "075C2C0A-E5E7-412C-9B28-3E3363A2DF05"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.32.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "534281D8-EAEB-4E78-8835-E6BA318BE866"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.32.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "192A8675-4413-4ADD-BF9E-DFD757C76387"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.32.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1E15D428-B54A-499D-8677-63C73A2C2934"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.32.13:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8804EC33-1751-4493-98D7-B85F326ABAD1"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.32.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BC94715E-208F-421E-8FCA-81E86175C983"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.32.15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "982071FC-873D-4C38-817B-F5853699135D"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.32.16:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6B721839-AB4C-4DE7-834F-E790DE770066"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.32.17:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "75965543-51D3-4809-8815-EA80BAC85C98"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.32.18:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4CEC8F08-EE90-41CA-A30F-D34290168571"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.34.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B39BF614-85CD-4C6A-877C-724FB6F5B125"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.34.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DD31EA80-D021-4E47-8FB0-E1F23E379EA7"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.34.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0C683054-0275-4A92-B003-9C9A5A03B6E2"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.35.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D2CD9FB1-AB83-427A-8923-97ED7ADFD63D"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}