CVE-2010-0307: canonical ubuntu_linux

Modified

Published 17-02-2010Last modified 07-08-2024

Vulnerability summary

CVE-2010-0307 is a medium (CVSS 4.7) vulnerability in canonical ubuntu_linux. EPSS estimates a 0.83% chance of exploitation in the next 30 days, higher than 57.4% of scored vulnerabilities. 2 public exploits are recorded.

Priority

Routine

Not severe (CVSS 4.7, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

4.7/10

010

Medium · v2.0 (NVD)

EPSS score

0.83%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits2reference, exploit-database

Advisory lineage

Upstream 0 · Downstream 4

DSA-1996-1 RHSA-2010:0146 RHSA-2010:0398 RHSA-2010:0771

Timeline

17-02-2010
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

The load_elf_binary function in fs/binfmt_elf.c in the Linux kernel before 2.6.32.8 on the x86_64 platform does not ensure that the ELF interpreter is available before a call to the SET_PERSONALITY macro, which allows local users to cause a denial of service (system crash) via a 32-bit application that attempts to execute a 64-bit application and then triggers a segmentation fault, as demonstrated by amd64_killer, related to the flush_old_exec function.

CVSS metrics

1 score · 1 source · 1 version

v2.04.7

EPSS trend

Probability

0.83%

Chance of exploitation in the next 30 days

Percentile

57%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.83% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

2 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databasedoslinux_x86-64Verified
Linux Kernel 2.6.x (x64) - Personality Handling Local Denial of Service
Maturity: poc

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.

Canonical1 product

ubuntu_linuxEOL6.06 | 8.04 | 8.10 | 9.04 | 9.10

Debian1 product

debian_linuxEOL4.0 | 5.0

Linux1 product

linux_kernel< 2.6.32.8

3 vendors · 3 products

References

29 links

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10870VDB EntrySignatureX Refsource OVALThird Party Advisory
git.kernel.orgX Refsource CONFIRM
www.openwall.com/lists/oss-security/2010/02/01/5Mailing ListX Refsource MLISTThird Party Advisory
www.ubuntu.com/usn/USN-914-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
bugzilla.redhat.com/show_bug.cgi?id=560547X Refsource CONFIRMIssue TrackingThird Party Advisory
www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.8X Refsource CONFIRMVendor Advisory
www.vupen.com/english/advisories/2010/0638VDB EntryX Refsource VUPENThird Party Advisory
www.openwall.com/lists/oss-security/2010/02/04/1Mailing ListX Refsource MLISTThird Party Advisory
www.redhat.com/support/errata/RHSA-2010-0771.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
rhn.redhat.com/errata/RHSA-2010-0146.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory

Show all 29 references

secunia.com/advisories/38779Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/39649Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
secunia.com/advisories/38922Third Party AdvisoryX Refsource SECUNIA
marc.info?t=126466700200002&r=1&w=2X Refsource CONFIRMMailing ListThird Party Advisory
www.debian.org/security/2010/dsa-1996Vendor AdvisoryX Refsource DEBIANThird Party Advisory
www.globalsecuritymag.com/Vigil-nce-Linux-kernel-denial-of%2C20100202%2C15754.htmlX Refsource MISC
lists.fedoraproject.org/pipermail/package-announce/2010-February/035159.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
secunia.com/advisories/43315Third Party AdvisoryX Refsource SECUNIA
marc.info?l=linux-mm&m=126466407724382&w=2Mailing ListX Refsource MLISTThird Party Advisory
www.mandriva.com/security/advisories?name=MDVSA-2010:066Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
www.redhat.com/support/errata/RHSA-2010-0398.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.openwall.com/lists/oss-security/2010/02/04/9Mailing ListX Refsource MLISTThird Party Advisory
www.vmware.com/security/advisories/VMSA-2011-0003.htmlX Refsource CONFIRMThird Party Advisory
www.openwall.com/lists/oss-security/2010/02/01/1Mailing ListX Refsource MLISTThird Party Advisory
support.avaya.com/css/P8/documents/100088287X Refsource CONFIRMThird Party Advisory
www.securityfocus.com/archive/1/516397/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
www.securityfocus.com/bid/38027VDB EntryX Refsource BIDExploitThird Party Advisory
secunia.com/advisories/38492Third Party AdvisoryX Refsource SECUNIA