Vulnerability Description
The TSB I-TLB load implementation in arch/sparc/kernel/tsb.S in the Linux kernel before 2.6.33 on the SPARC platform does not properly obtain the value of a certain _PAGE_EXEC_4U bit and consequently does not properly implement a non-executable stack, which makes it easier for context-dependent attackers to exploit stack-based buffer overflows via a crafted application.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | < 2.6.33 |
| Debian | Debian Linux | 5.0 |
Related Weaknesses (CWE)
References
- http://marc.info/?l=linux-sparc&m=126662159602378&w=2ExploitMailing ListPatch
- http://marc.info/?l=linux-sparc&m=126662196902830&w=2ExploitMailing ListThird Party Advisory
- http://secunia.com/advisories/39830Third Party Advisory
- http://www.debian.org/security/2010/dsa-2053Third Party Advisory
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.33Broken Link
- http://www.openwall.com/lists/oss-security/2010/02/24/1ExploitMailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2010/05/05/2Mailing ListThird Party Advisory
- http://marc.info/?l=linux-sparc&m=126662159602378&w=2ExploitMailing ListPatch
- http://marc.info/?l=linux-sparc&m=126662196902830&w=2ExploitMailing ListThird Party Advisory
- http://secunia.com/advisories/39830Third Party Advisory
- http://www.debian.org/security/2010/dsa-2053Third Party Advisory
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.33Broken Link
- http://www.openwall.com/lists/oss-security/2010/02/24/1ExploitMailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2010/05/05/2Mailing ListThird Party Advisory
FAQ
What is CVE-2010-1451?
CVE-2010-1451 is a vulnerability with a CVSS score of 2.1 (LOW). The TSB I-TLB load implementation in arch/sparc/kernel/tsb.S in the Linux kernel before 2.6.33 on the SPARC platform does not properly obtain the value of a certain _PAGE_EXEC_4U bit and consequently ...
How severe is CVE-2010-1451?
CVE-2010-1451 has been rated LOW with a CVSS base score of 2.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2010-1451?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel, Debian Debian Linux.