National Cyber Awareness System

Vulnerability Summary for CVE-2010-4346

Overview

The install_special_mapping function in mm/mmap.c in the Linux kernel before 2.6.37-rc6 does not make an expected security_file_mmap function call, which allows local users to bypass intended mmap_min_addr restrictions and possibly conduct NULL pointer dereference attacks via a crafted assembly-language application.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: https://bugzilla.redhat.com/show_bug.cgi?id=662189

Type: Patch Information

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=662189

External Source: MLIST

Name: [oss-security] 20101210 Re: Subject: CVE request: kernel: install_special_mapping skips security_file_mmap check

Type: Patch Information

Hyperlink:http://openwall.com/lists/oss-security/2010/12/10/3

External Source: MLIST

Name: [oss-security] 20101210 Subject: CVE request: kernel: install_special_mapping skips security_file_mmap check

Type: Patch Information

Hyperlink:http://openwall.com/lists/oss-security/2010/12/10/2

External Source: MLIST

Name: [oss-security] 20101209 Re: [taviso@cmpxchg8b.com: [PATCH] install_special_mapping skips security_file_mmap check.]

Type: Patch Information

Hyperlink:http://openwall.com/lists/oss-security/2010/12/09/13

External Source: MLIST

Name: [oss-security] 20101209 [taviso@cmpxchg8b.com: [PATCH] install_special_mapping skips security_file_mmap check.]

Type: Patch Information

Hyperlink:http://openwall.com/lists/oss-security/2010/12/09/12

External Source: CONFIRM

Name: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=462e635e5b73ba9a4c03913b77138cd57ce4b050

Type: Patch Information

Hyperlink:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=462e635e5b73ba9a4c03913b77138cd57ce4b050

External Source: MLIST

Name: [linux-kernel] 20101209 [PATCH] install_special_mapping skips security_file_mmap check.

Hyperlink:https://lkml.org/lkml/2010/12/9/222

External Source: CONFIRM

Name: http://www.vmware.com/security/advisories/VMSA-2011-0012.html

Hyperlink:http://www.vmware.com/security/advisories/VMSA-2011-0012.html

External Source: BID

Name: 45323

Hyperlink:http://www.securityfocus.com/bid/45323

External Source: BUGTRAQ

Name: 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/520102/100/0/threaded

External Source: MANDRIVA

Name: MDVSA-2011:029

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2011:029

External Source: CONFIRM

Name: http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.37-rc6

Hyperlink:http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.37-rc6

External Source: SECUNIA

Name: 46397

Hyperlink:http://secunia.com/advisories/46397

External Source: SECUNIA

Name: 42570

Type: Advisory

Hyperlink:http://secunia.com/advisories/42570