CVE-2010-2959
HighInteger overflow in net/can/bcm.c in the Controller Area Network (CAN) implementation in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6, and 2.6.35.x before 2.6.35.4 allows attackers to execute arbitrary code or cause a denial of service (system crash) via crafted CAN traffic.
CVSS 2.0 score
7.2
AV:L/AC:L/Au:N/C:C/I:C/A:C
Weakness type
CWE-190CVE-2010-2959 is a Integer Overflow vulnerability
What is Integer Overflow?
The product performs a calculation that can produce an integer overflow, leading to unexpected values. Learn more on MITRE CWE
References
The following references provide additional information about CVE-2010-2959 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.
-
Exploit Mailing List Third Party Advisory
-
Mailing List Third Party Advisory
-
Mailing List Third Party Advisory
-
Mailing List Third Party Advisory
-
Mailing List Third Party Advisory
-
Broken Link
-
Debian Securityhttp://www.debian.org/security/2010/dsa-2094Third Party Advisory
-
Broken Link
-
Broken Link
-
Broken Link
-
Broken Link
-
Broken Link
-
Mailing List Third Party Advisory
-
Securityfocushttp://www.securityfocus.com/bid/42585Exploit Third Party Advisory VDB Entry
-
Broken Link
-
Broken Link
-
PatchKernel patch commithttp://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5b75c4973ce779520b9d1e392483207d6f842cde
-
PatchKernel patch commithttps://bugzilla.redhat.com/show_bug.cgi?id=625699
Frequently asked questions
-
What is CVE-2010-2959?
CVE-2010-2959 is a High severity Linux kernel vulnerability with a CVSS score of 7.2 out of 10 , classified as an Integer Overflow flaw (CWE-190) . CVE-2010-2959 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
What is the CVSS score for CVE-2010-2959?
CVE-2010-2959 has a CVSS score of 7.2 out of 10, rated High severity (CVSS 2.0). The vector string is
AV:L/AC:L/Au:N/C:C/I:C/A:C. -
Is there a patch available for CVE-2010-2959?
No patch is currently available for CVE-2010-2959. Monitor the NIST NVD and your Linux distribution's security advisories for updates.
-
Is CVE-2010-2959 actively exploited?
No — CVE-2010-2959 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.
-
What is Integer Overflow (CWE-190)?
The product performs a calculation that can produce an integer overflow, leading to unexpected values. View CWE-190 on MITRE CWE →