Name: CVE-2010-3904: Improper Validation of Specified Quantity in Input
Creator: Rapid7
Published: 2010-12-06T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2010-3904, CWE-20, CWE-1284, Exploited in the Wild, CISA KEV Exploit, Metasploit Module, CVSS 7.8, EPSS 0.01386, CISA KEV

The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.

CVSS Details

CVSS 3.1 Base Score: 7.8

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Centos_linux	—	Upgrade kernel-debugUpgrade kernel-xen-develUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-xenUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-PAE-develUpgrade kernel-PAEUpgrade kernel	Dec 1, 2016	Dec 6, 2010
Oracle_linux	—	Upgrade kernel	Oct 16, 2024	Dec 6, 2010
Suse	—	Upgrade ofedUpgrade ofed-kmp-defaultUpgrade ofed-kmp-ppc64Upgrade ofed-kmp-traceUpgrade ofed-develUpgrade ofed-docUpgrade ofed-kmp-pae	Feb 17, 2015	Jun 28, 2013
Ubuntu	—	Upgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.32-25-genericUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.35-22-omapUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.32-25-virtualUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.28-19-virtualUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.32-25-preemptUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.35-22-versatileUpgrade linux-image-2.6.32-25-sparc64-smpUpgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.28-19-versatileUpgrade linux-image-2.6.32-25-lpiaUpgrade linux-image-2.6.35-22-powerpcUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.32-25-generic-paeUpgrade linux-image-2.6.35-22-generic-paeUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.35-22-powerpc64-smpUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.28-19-imx51Upgrade linux-image-2.6.35-22-serverUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.35-22-genericUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.28-19-ixp4xxUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.32-25-serverUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.32-25-ia64Upgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.32-25-powerpcUpgrade linux-image-2.6.32-25-sparc64Upgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.32-25-386Upgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.28-19-genericUpgrade linux-image-2.6.32-25-versatileUpgrade linux-image-2.6.35-22-powerpc-smpUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.32-25-powerpc64-smpUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.35-22-virtualUpgrade linux-image-2.6.32-25-powerpc-smpUpgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.28-19-iop32xUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.32-309-ec2Upgrade linux-image-2.6.28-19-lpiaUpgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.28-19-server	Nov 8, 2024	Dec 6, 2010
Vmsa 2011 0012	—	Upgrade VMware ESX 4.1 to build number 502767Upgrade VMware ESX 4.0 to build number 480973	Oct 20, 2011	Dec 6, 2010

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence