CVE-2010-3858

Priority
Description
The setup_arg_pages function in fs/exec.c in the Linux kernel before
2.6.36, when CONFIG_STACK_GROWSDOWN is used, does not properly restrict the
stack memory consumption of the (1) arguments and (2) environment for a
32-bit application on a 64-bit platform, which allows local users to cause
a denial of service (system crash) via a crafted exec system call, a
related issue to CVE-2010-2240.
Ubuntu-Description
Brad Spengler discovered that stack memory for new a process was not
correctly calculated. A local attacker could exploit this to crash the
system, leading to a denial of service.
Assigned-to
ogasawara
Package
Upstream:released (2.6.36~rc4)
Package
Upstream:released (2.6.36~rc4)
Package
Upstream:released (2.6.36~rc4)
Package
Upstream:released (2.6.36~rc4)
Package
Upstream:released (2.6.36~rc4)
Package
Upstream:released (2.6.36~rc4)
Package
Upstream:released (2.6.36~rc4)
More Information

Updated: 2019-01-14 21:54:36 UTC (commit 51f9b73af244ba86b9321e46e526586c25a8e060)