CVE-2010-3310

Published: 29 September 2010

Multiple integer signedness errors in net/rose/af_rose.c in the Linux kernel before 2.6.36-rc5-next-20100923 allow local users to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a rose_getname function call, related to the rose_bind and rose_connect functions.

From the Ubuntu Security Team

Dan Rosenberg discovered that the ROSE driver did not correctly check parameters. A local attacker with access to a ROSE network device could exploit this to crash the system or possibly gain root privileges.

Priority

Status

Package	Release	Status
linux Launchpad, Ubuntu, Debian	dapper	Does not exist
	hardy	Released (2.6.24-28.80)
	jaunty	Released (2.6.28-19.66)
	karmic	Released (2.6.31-22.67)
	lucid	Released (2.6.32-25.45)
	maverick	Not vulnerable
	upstream	Needs triage
	Patches: hardy: http://chinstrap.ubuntu.com/~bradf/CVEs/CVE-2010-3310/patches/hardy/linux/0001-rose-Fix-signedness-issues-wrt.-digi-count.txt jaunty: http://chinstrap.ubuntu.com/~bradf/CVEs/CVE-2010-3310/patches/jaunty/linux/0001-rose-Fix-signedness-issues-wrt.-digi-count.txt karmic: http://chinstrap.ubuntu.com/~bradf/CVEs/CVE-2010-3310/patches/karmic/linux/0001-rose-Fix-signedness-issues-wrt.-digi-count.txt lucid: http://chinstrap.ubuntu.com/~bradf/CVEs/CVE-2010-3310/patches/lucid/linux/0001-rose-Fix-signedness-issues-wrt.-digi-count.txt
linux-ec2 Launchpad, Ubuntu, Debian	dapper	Does not exist
	hardy	Does not exist
	karmic	Released (2.6.31-307.21)
	lucid	Released (2.6.32-309.18)
	maverick	Ignored (binary supplied by "linux" now)
	upstream	Needs triage
linux-fsl-imx51 Launchpad, Ubuntu, Debian	dapper	Does not exist
	hardy	Does not exist
	karmic	Released (2.6.31-112.30)
	lucid	Released (2.6.31-608.22)
	maverick	Does not exist
	upstream	Needs triage
linux-lts-backport-maverick Launchpad, Ubuntu, Debian	dapper	Does not exist
	hardy	Does not exist
	karmic	Does not exist
	lucid	Released (2.6.35-25.44~lucid1)
	maverick	Does not exist
	upstream	Needs triage
linux-mvl-dove Launchpad, Ubuntu, Debian	dapper	Does not exist
	hardy	Does not exist
	karmic	Ignored (abandonded branch)
	lucid	Released (2.6.32-216.33)
	maverick	Released (2.6.32-416.33)
	upstream	Needs triage
linux-source-2.6.15 Launchpad, Ubuntu, Debian	dapper	Released (2.6.15-55.89)
	hardy	Does not exist
	jaunty	Does not exist
	karmic	Does not exist
	lucid	Does not exist
	maverick	Does not exist
	upstream	Needs triage
	Patches: dapper: http://chinstrap.ubuntu.com/~bradf/CVEs/CVE-2010-3310/patches/dapper/linux/0001-rose-Fix-signedness-issues-wrt.-digi-count.txt

References

Join the discussion

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›