fs/exec.c in the Linux kernel before 2.6.37 does not enable the OOM Killer to assess use of stack memory by arrays representing the (1) arguments and (2) environment, which allows local users to cause a denial of service (memory consumption) via a crafted exec system call, aka an "OOM dodging issue," a related issue to CVE-2010-3858.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jan 22, 2011 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-ppc64Upgrade kernel-defaultUpgrade kernel-default-develUpgrade kernel-trace-baseUpgrade kernel-default-baseUpgrade kernel-xen-baseUpgrade kernel-xenUpgrade kernel-xen-develUpgrade kernel-trace-develUpgrade kernel-ppc64-develUpgrade kernel-pae-develUpgrade kernel-default-manUpgrade kernel-ppc64-baseUpgrade kernel-sourceUpgrade kernel-docsUpgrade kernel-traceUpgrade kernel-paeUpgrade kernel-pae-base | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.32-28-sparc64Upgrade linux-image-2.6.32-28-generic-paeUpgrade linux-image-2.6.32-28-serverUpgrade linux-image-2.6.32-32-genericUpgrade linux-image-2.6.32-32-preemptUpgrade linux-image-2.6.32-312-ec2Upgrade linux-image-2.6.32-28-sparc64-smpUpgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.32-32-sparc64Upgrade linux-image-2.6.32-32-lpiaUpgrade linux-image-2.6.32-32-generic-paeUpgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.32-28-386Upgrade linux-image-2.6.32-32-virtualUpgrade linux-image-2.6.32-32-serverUpgrade linux-image-2.6.35-25-powerpc64-smpUpgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.32-32-powerpc64-smpUpgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.32-28-powerpcUpgrade linux-image-2.6.32-28-powerpc-smpUpgrade linux-image-2.6.32-28-ia64Upgrade linux-image-2.6.35-25-powerpc-smpUpgrade linux-image-2.6.35-25-omapUpgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.35-25-versatileUpgrade linux-image-2.6.32-28-versatileUpgrade linux-image-2.6.32-28-preemptUpgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.32-28-lpiaUpgrade linux-image-2.6.32-28-virtualUpgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.32-32-386Upgrade linux-image-2.6.32-28-powerpc64-smpUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-28-genericUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.35-25-powerpcUpgrade linux-image-2.6.32-32-powerpc | Nov 8, 2024 | Jan 22, 2011 |
| Vmsa 2011 0012 | — | Upgrade VMware ESX 4.0 to build number 480973Upgrade VMware ESX 4.1 to build number 502767 | Oct 20, 2011 | Jan 22, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub