CVE-2010-3084

Published: 29 September 2010

Buffer overflow in the niu_get_ethtool_tcam_all function in drivers/net/niu.c in the Linux kernel before 2.6.36-rc4 allows local users to cause a denial of service or possibly have unspecified other impact via the ETHTOOL_GRXCLSRLALL ethtool command.

From the Ubuntu Security Team

Ben Hutchings discovered that the ethtool interface did not correctly check certain sizes. A local attacker could perform malicious ioctl calls that could crash the system, leading to a denial of service.

Priority

Status

Package	Release	Status
linux Launchpad, Ubuntu, Debian	dapper	Does not exist
	hardy	Not vulnerable
	jaunty	Not vulnerable
	karmic	Released (2.6.31-22.67)
	lucid	Released (2.6.32-25.45)
	maverick	Not vulnerable
	upstream	Needs triage
	Patches: karmic: http://chinstrap.ubuntu.com/~bradf/CVEs/CVE-2010-3084/patches/karmic/linux/0001-niu-Fix-kernel-buffer-overflow-for-ETHTOOL_GRXCLSRLALL.txt lucid: http://chinstrap.ubuntu.com/~bradf/CVEs/CVE-2010-3084/patches/lucid/linux/0001-niu-Fix-kernel-buffer-overflow-for-ETHTOOL_GRXCLSRLALL.txt
linux-ec2 Launchpad, Ubuntu, Debian	dapper	Does not exist
	hardy	Does not exist
	karmic	Released (2.6.31-307.21)
	lucid	Released (2.6.32-309.18)
	maverick	Ignored (binary supplied by "linux" now)
	upstream	Needs triage
linux-fsl-imx51 Launchpad, Ubuntu, Debian	dapper	Does not exist
	hardy	Does not exist
	karmic	Released (2.6.31-112.30)
	lucid	Released (2.6.31-608.22)
	maverick	Does not exist
	upstream	Needs triage
linux-lts-backport-maverick Launchpad, Ubuntu, Debian	dapper	Does not exist
	hardy	Does not exist
	karmic	Does not exist
	lucid	Released (2.6.35-25.44~lucid1)
	maverick	Does not exist
	upstream	Needs triage
linux-mvl-dove Launchpad, Ubuntu, Debian	dapper	Does not exist
	hardy	Does not exist
	karmic	Ignored (abandonded branch)
	lucid	Released (2.6.32-216.33)
	maverick	Released (2.6.32-416.33)
	upstream	Needs triage
linux-source-2.6.15 Launchpad, Ubuntu, Debian	dapper	Not vulnerable
	hardy	Does not exist
	jaunty	Does not exist
	karmic	Does not exist
	lucid	Does not exist
	maverick	Does not exist
	upstream	Needs triage

References

Join the discussion

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›