CVE-2010-3858 (retired)

Priority
Description
The setup_arg_pages function in fs/exec.c in the Linux kernel before
2.6.36, when CONFIG_STACK_GROWSDOWN is used, does not properly restrict the
stack memory consumption of the (1) arguments and (2) environment for a
32-bit application on a 64-bit platform, which allows local users to cause
a denial of service (system crash) via a crafted exec system call, a
related issue to CVE-2010-2240.
Ubuntu-Description
Brad Spengler discovered that stack memory for new a process was not
correctly calculated. A local attacker could exploit this to crash the
system, leading to a denial of service.
Assigned-to
ogasawara
Package
Upstream:released (2.6.36~rc4)
Package
Upstream:released (2.6.36~rc4)
Package
Upstream:released (2.6.36~rc4)
Package
Upstream:released (2.6.36~rc4)
Package
Upstream:released (2.6.36~rc4)
Package
Upstream:released (2.6.36~rc4)
Package
Upstream:released (2.6.36~rc4)
More Information

Updated: 2019-03-26 11:53:40 UTC (commit ccdecfcf0fead22bd291e5f4ea745a46872dcb15)