CVE-2010-4243

Published: Jan 22, 2011Modified: Apr 29, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

fs/exec.c in the Linux kernel before 2.6.37 does not enable the OOM Killer to assess use of stack memory by arrays representing the (1) arguments and (2) environment, which allows local users to cause a denial of service (memory consumption) via a crafted exec system call, aka an "OOM dodging issue," a related issue to CVE-2010-3858.

Affected (1)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 2.6.37

Related CWEs

CWE-400

Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References (38)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3c77f845722158206a7209c45ccddc264d19319c

Source: secalert@redhat.com

http://grsecurity.net/~spender/64bit_dos.c

Source: secalert@redhat.com

Broken Link

http://linux.derkeiler.com/Mailing-Lists/Kernel/2010-11/msg13278.html

Source: secalert@redhat.com

Broken Link

http://lkml.org/lkml/2010/8/27/429

Source: secalert@redhat.com

Mailing ListPatchThird Party Advisory

http://lkml.org/lkml/2010/8/29/206

Source: secalert@redhat.com

Mailing ListPatchThird Party Advisory

http://lkml.org/lkml/2010/8/30/138

Source: secalert@redhat.com

Mailing ListPatchThird Party Advisory

http://lkml.org/lkml/2010/8/30/378

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://openwall.com/lists/oss-security/2010/11/22/15

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://openwall.com/lists/oss-security/2010/11/22/6

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://secunia.com/advisories/42884

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/46397

Source: secalert@redhat.com

Third Party Advisory

http://www.exploit-db.com/exploits/15619

Source: secalert@redhat.com

ExploitThird Party AdvisoryVDB Entry

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37

Source: secalert@redhat.com

Broken Link

http://www.redhat.com/support/errata/RHSA-2011-0017.html

Source: secalert@redhat.com

Third Party Advisory

http://www.securityfocus.com/archive/1/520102/100/0/threaded

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/45004

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.vmware.com/security/advisories/VMSA-2011-0012.html

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=625688

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/64700

Source: secalert@redhat.com

VDB Entry

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3c77f845722158206a7209c45ccddc264d19319c