CVE-2010-0307

Advisory lineage Upstream: 0 Downstream: 4
Modified
Published: 17 Feb 2010, 18:00
Last modified:07 Aug 2024, 00:45

Vulnerability Summary

Overall Risk (default)
medium
29/100
CVSS Score
4.7 MEDIUM
v2.0 (nvd)
EPSS Score
0.4% LOW
0% probability +0.11%
KEV
Not listed
Ransomware
No reports
Public exploits
2 found
Dark Web
Not detected

Timeline

17 Feb 2010, 18:00
Published
Vulnerability first disclosed
07 Aug 2024, 00:45
Last Modified
Vulnerability information updated

Description

The load_elf_binary function in fs/binfmt_elf.c in the Linux kernel before 2.6.32.8 on the x86_64 platform does not ensure that the ELF interpreter is available before a call to the SET_PERSONALITY macro, which allows local users to cause a denial of service (system crash) via a 32-bit application that attempts to execute a 64-bit application and then triggers a segmentation fault, as demonstrated by amd64_killer, related to the flush_old_exec function.

CVSS Metrics

  • v2.0•MEDIUM•Score: 4.7AV:L/AC:M/Au:N/C:N/I:N/A:C

EPSS Trends

Current EPSS score: 0.40%• Percentile: 61%

Affected Systems

  • canonical•ubuntu_linux

    6.06 | 8.04 | 8.10 | 9.04 | 9.10

  • debian•debian_linux

    4.0 | 5.0

  • linux•linux_kernel

    < 2.6.32.8

References (29)