NetSight
IP …
high7.2Public exploit code

CVE-2010-2959

Integer overflow in net/can/bcm.c in the Controller Area Network (CAN) implementation in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Integer overflow in net/can/bcm.c in the Controller Area Network (CAN) implementation in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6, and 2.6.35.x before 2.6.35.4 allows attackers to execute arbitrary code or cause a denial of service (system crash) via crafted CAN traffic.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 2.6.27.53
from 2.6.32 before 2.6.32.21
from 2.6.34 before 2.6.34.6
from 2.6.35 before 2.6.35.4
FedoraprojectFedora
Version 12
DebianDebian Linux
Version 5.0
OpensuseOpensuse
Version 11.3
SuseLinux Enterprise Desktop
Version 11
SuseLinux Enterprise High Availability Extension
Version 11
SuseLinux Enterprise Real Time
Version 11
SuseLinux Enterprise Server
Version 11

Weakness classification

CWE-190

References