CVE-2010-2959

Published: Sep 8, 2010Modified: Apr 29, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Integer overflow in net/can/bcm.c in the Controller Area Network (CAN) implementation in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6, and 2.6.35.x before 2.6.35.4 allows attackers to execute arbitrary code or cause a denial of service (system crash) via crafted CAN traffic.

Affected (11)

Products: Linux: Linux Kernel · Fedoraproject: Fedora · Debian: Debian Linux · +2 more

Show all products

Linux: Linux Kernel · Fedoraproject: Fedora · Debian: Debian Linux · Opensuse: Opensuse · Suse: Linux Enterprise Desktop, Linux Enterprise High Availability Extension, Linux Enterprise Real Time, Linux Enterprise Server

1 product

1 product

1 product

1 product

4 products

Linux Enterprise Desktop

Linux Enterprise High Availability Extension

Linux Enterprise Real Time

Linux Enterprise Server

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 2.6.27.53
Linux Linux Kernel	From 2.6.32 to 2.6.32.21
Linux Linux Kernel	From 2.6.34 to 2.6.34.6
Linux Linux Kernel	From 2.6.35 to 2.6.35.4

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 12

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 5.0

Configuration D

5 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 11.3
Suse Linux Enterprise Desktop	Version 11 sp1
Suse Linux Enterprise High Availability Extension	Version 11 sp1
Suse Linux Enterprise Real Time	Version 11 sp1
Suse Linux Enterprise Server	Version 11 sp1

Related CWEs

CWE-190

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (36)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5b75c4973ce779520b9d1e392483207d6f842cde

Source: security@ubuntu.com

http://jon.oberheide.org/files/i-can-haz-modharden.c

Source: security@ubuntu.com

ExploitMailing ListThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2010-September/046947.html

Source: security@ubuntu.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html

Source: security@ubuntu.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html

Source: security@ubuntu.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html

Source: security@ubuntu.com

Mailing ListThird Party Advisory

http://secunia.com/advisories/41512

Source: security@ubuntu.com

Broken Link

http://www.debian.org/security/2010/dsa-2094

Source: security@ubuntu.com

Third Party Advisory

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.53

Source: security@ubuntu.com

Broken Link

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.21

Source: security@ubuntu.com

Broken Link

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34.6

Source: security@ubuntu.com

Broken Link

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35.4

Source: security@ubuntu.com

Broken Link

http://www.mandriva.com/security/advisories?name=MDVSA-2010:198

Source: security@ubuntu.com

Broken Link

http://www.openwall.com/lists/oss-security/2010/08/20/2

Source: security@ubuntu.com

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/42585

Source: security@ubuntu.com

ExploitThird Party AdvisoryVDB Entry

http://www.vupen.com/english/advisories/2010/2430

Source: security@ubuntu.com

Broken Link

http://www.vupen.com/english/advisories/2011/0298

Source: security@ubuntu.com

Broken Link

https://bugzilla.redhat.com/show_bug.cgi?id=625699

Source: security@ubuntu.com

Issue TrackingPatchThird Party Advisory

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5b75c4973ce779520b9d1e392483207d6f842cde