Heap-based buffer overflow in the bcm_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller Area Network (CAN) implementation in the Linux kernel before 2.6.36.2 on 64-bit platforms might allow local users to cause a denial of service (memory corruption) via a connect operation.
CVSS Details
- CVSS 3.1 Base Score: 4.7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Dec 29, 2010 |
| Suse | — | Upgrade kernel-xen-baseUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-xen-develUpgrade kernel-pae-develUpgrade kernel-xenUpgrade kernel-trace-develUpgrade kernel-sourceUpgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-ppc64-develUpgrade kernel-traceUpgrade kernel-pae-baseUpgrade kernel-ppc64-baseUpgrade kernel-ppc64Upgrade kernel-paeUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-trace-base | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.32-28-386Upgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.32-28-genericUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.31-609-imx51Upgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.35-25-powerpc64-smpUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.32-28-sparc64-smpUpgrade linux-image-2.6.35-25-powerpc-smpUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.32-28-sparc64Upgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.32-28-serverUpgrade linux-image-2.6.32-312-ec2Upgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.32-28-virtualUpgrade linux-image-2.6.32-28-lpiaUpgrade linux-image-2.6.35-25-versatileUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.32-28-ia64Upgrade linux-image-2.6.32-28-generic-paeUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.32-28-versatileUpgrade linux-image-2.6.32-28-powerpc-smpUpgrade linux-image-2.6.35-25-omapUpgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.32-28-powerpc64-smpUpgrade linux-image-2.6.32-28-preemptUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.32-28-powerpcUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.35-25-powerpcUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.35-25-generic-pae | Nov 8, 2024 | Dec 29, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub