CVE-2010-1451
LowThe TSB I-TLB load implementation in arch/sparc/kernel/tsb.S in the Linux kernel before 2.6.33 on the SPARC platform does not properly obtain the value of a certain _PAGE_EXEC_4U bit and consequently does not properly implement a non-executable stack, which makes it easier for context-dependent attackers to exploit stack-based buffer overflows via a crafted application.
CVSS 2.0 score
2.1
AV:L/AC:L/Au:N/C:N/I:P/A:N
Weakness type
CWE-787CVE-2010-1451 is a Out-of-bounds Write vulnerability
What is Out-of-bounds Write?
The product writes data past the end or before the beginning of the intended buffer. Learn more on MITRE CWE
References
7 total-
Exploit Mailing List Patch Third Party Advisory
-
Exploit Mailing List Third Party Advisory
-
Exploit Mailing List Third Party Advisory
-
Third Party Advisory
-
Debian Securityhttp://www.debian.org/security/2010/dsa-2053Third Party Advisory
Frequently asked questions
-
What is CVE-2010-1451?
CVE-2010-1451 is a Low severity Linux kernel vulnerability with a CVSS score of 2.1 out of 10 , classified as an Out-of-bounds Write flaw (CWE-787) . CVE-2010-1451 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
What is the CVSS score for CVE-2010-1451?
CVE-2010-1451 has a CVSS score of 2.1 out of 10, rated Low severity (CVSS 2.0). The vector string is
AV:L/AC:L/Au:N/C:N/I:P/A:N. -
Is there a patch available for CVE-2010-1451?
Monitor the NIST NVD and your Linux distribution's security advisories for CVE-2010-1451 patch availability.
-
Is CVE-2010-1451 actively exploited?
No. CVE-2010-1451 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.