Name: CVE-2010-3904: Improper Validation of Specified Quantity in Input
Creator: Rapid7
Published: 2010-12-06T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2010-3904, CWE-20, CWE-1284, Exploited in the Wild, CISA KEV Exploit, Metasploit Module, CVSS 7.8, EPSS 0.01386, CISA KEV

The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.

CVSS Details

CVSS 3.1 Base Score: 7.8

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Centos_linux	—	Upgrade kernel-PAE-develUpgrade kernel-headersUpgrade kernel-PAEUpgrade kernelUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-develUpgrade kernel-xenUpgrade kernel-debug-develUpgrade kernel-xen-devel	Dec 1, 2016	Dec 6, 2010
Oracle_linux	—	Upgrade kernel	Oct 16, 2024	Dec 6, 2010
Suse	—	Upgrade ofed-develUpgrade ofed-kmp-traceUpgrade ofed-docUpgrade ofed-kmp-paeUpgrade ofedUpgrade ofed-kmp-defaultUpgrade ofed-kmp-ppc64	Feb 17, 2015	Jun 28, 2013
Ubuntu	—	Upgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.32-25-sparc64-smpUpgrade linux-image-2.6.32-25-preemptUpgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.35-22-generic-paeUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.32-25-generic-paeUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.35-22-versatileUpgrade linux-image-2.6.32-25-lpiaUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.28-19-virtualUpgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.28-19-versatileUpgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.35-22-omapUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.35-22-powerpcUpgrade linux-image-2.6.32-25-genericUpgrade linux-image-2.6.32-25-virtualUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.32-25-serverUpgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.28-19-ixp4xxUpgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.32-25-powerpcUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.32-25-sparc64Upgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.32-309-ec2Upgrade linux-image-2.6.35-22-genericUpgrade linux-image-2.6.28-19-serverUpgrade linux-image-2.6.28-19-genericUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.35-22-powerpc-smpUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.32-25-ia64Upgrade linux-image-2.6.32-25-powerpc64-smpUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.32-25-powerpc-smpUpgrade linux-image-2.6.28-19-iop32xUpgrade linux-image-2.6.35-22-virtualUpgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.32-25-386Upgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.28-19-lpiaUpgrade linux-image-2.6.28-19-imx51Upgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.32-25-versatileUpgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.35-22-powerpc64-smpUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.35-22-serverUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.15-55-amd64-generic	Nov 8, 2024	Dec 6, 2010
Vmsa 2011 0012	—	Upgrade VMware ESX 4.0 to build number 480973Upgrade VMware ESX 4.1 to build number 502767	Oct 20, 2011	Dec 6, 2010

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence