CVE-2010-3442: canonical ubuntu_linux Integer Overflow or Wraparound
Vulnerability summary
CVE-2010-3442 is a medium (CVSS 4.7) Integer Overflow or Wraparound vulnerability in canonical ubuntu_linux. EPSS estimates a 0.40% chance of exploitation in the next 30 days, higher than 33.7% of scored vulnerabilities.
Not severe (CVSS 4.7, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 5Timeline
- 04-10-2010PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Multiple integer overflows in the snd_ctl_new function in sound/core/control.c in the Linux kernel before 2.6.36-rc5-next-20100929 allow local users to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted (1) SNDRV_CTL_IOCTL_ELEM_ADD or (2) SNDRV_CTL_IOCTL_ELEM_REPLACE ioctl call.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.40%
Chance of exploitation in the next 30 days
Percentile
34%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.40% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.
Suse4 products
Canonical1 product
- ubuntu_linuxEOL6.06 | 8.04 | 9.04 | 9.10 | 10.04 | 10.10
Debian1 product
- debian_linuxEOL5.0
Fedoraproject1 product
- fedoraEOL13
Linux1 product
- linux_kernel< 2.6.36 | 2.6.36 | 2.6.36:rc1 | 2.6.36:rc2 | 2.6.36:rc3 | 2.6.36:rc4
Opensuse1 product
- opensuseEOL11.2 | 11.3
6 vendors · 9 products
References
36 links- git.kernel.orgX Refsource CONFIRM
- www.redhat.com/support/errata/RHSA-2011-0004.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
- www.securityfocus.com/archive/1/520102/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
- lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
Show all 36 references
- lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- www.openwall.com/lists/oss-security/2010/09/29/4Mailing ListX Refsource MLISTPatchThird Party Advisory
- www.redhat.com/support/errata/RHSA-2010-0936.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
- www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.36-rc5-next-20100928.bz2X Refsource CONFIRMBroken Link
- lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- www.redhat.com/support/errata/RHSA-2010-0842.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
- www.redhat.com/support/errata/RHSA-2010-0958.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
- www.openwall.com/lists/oss-security/2010/09/29/3Mailing ListX Refsource MLISTPatchThird Party Advisory
- bugzilla.redhat.com/show_bug.cgi?id=638478X Refsource CONFIRMIssue TrackingPatchThird Party Advisory
- www.mandriva.com/security/advisories?name=MDVSA-2010:257Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- www.openwall.com/lists/oss-security/2010/09/29/9Mailing ListX Refsource MLISTPatchThird Party Advisory
- www.openwall.com/lists/oss-security/2010/09/29/2Mailing ListX Refsource MLISTPatchThird Party Advisory
