Integer overflow in Linux Linux_kernel
CVE-2010-2959
Integer overflow in net/can/bcm.c in the Controller Area Network (CAN) implementation in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6, and 2.6.35.x before 2.6.35.4 allows attackers to execute arbit…
Vulnerability class: Integer Overflow
EPSS: 0.037 (88.7th percentile) — read the EPSS interpretation.
Affected products
- Linux Linux_kernel
- Debian Debian_linux — versions 5.0
- Fedoraproject Fedora — versions 12
- Opensuse — versions 11.3
- Suse Linux_enterprise_desktop — versions 11
- Suse Linux_enterprise_high_availability_extension — versions 11
- Suse Linux_enterprise_real_time — versions 11
- Suse Linux_enterprise_server — versions 11
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- security@ubuntu.com (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)
- security@ubuntu.com (x_refsource_CONFIRM, Broken Link)
- security@ubuntu.com (Exploit, Third Party Advisory, VDB Entry, vdb-entry, x_refsource_BID)
- security@ubuntu.com (vendor-advisory, x_refsource_FEDORA, Mailing List, Third Party Advisory)
- security@ubuntu.com (vendor-advisory, x_refsource_MANDRIVA, Broken Link)
- security@ubuntu.com (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)
- security@ubuntu.com (x_refsource_CONFIRM, Broken Link)
- security@ubuntu.com (vdb-entry, x_refsource_VUPEN, Broken Link)
- security@ubuntu.com (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)
- security@ubuntu.com (vdb-entry, x_refsource_VUPEN, Broken Link)
Frequently asked questions
- What is CVE-2010-2959?
- CVE-2010-2959 is a vulnerability in Linux Linux_kernel, classified under Integer Overflow or Wraparound. Published 2010-09-08.
- Is CVE-2010-2959 known to be exploited?
- 107 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.