CVE-2010-3310

Severity: low (CVSS 1.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-09-29 · updated 2026-06-16
Weakness: CWE-189

Description

Multiple integer signedness errors in net/rose/af_rose.c in the Linux kernel before 2.6.36-rc5-next-20100923 allow local users to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a rose_getname function call, related to the rose_bind and rose_connect functions.

Affected products

Canonical Ubuntu Linux: 6.06, 8.04, 9.04, 9.10, 10.04, 10.10
Debian Linux: 5.0
Linux kernel: through 2.6.36; 2.6.36-rc1, 2.6.36-rc2, 2.6.36-rc3, 2.6.36-rc4

References

http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=9828e6e6e3f19efcb476c567b9999891d051f52f
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00004.html
http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html
http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html
http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html
http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html
http://marc.info/?l=linux-netdev&m=128502238927086&w=2
http://secunia.com/advisories/41493
http://secunia.com/advisories/43291
http://www.debian.org/security/2010/dsa-2126
http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.36-rc5-next-20100923.bz2

Get alerted when CVE-2010-3310 or the next vulnerability affects your stack