NetSight
IP …
medium4.7Public exploit code

CVE-2010-3849

The econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users to cause a …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a sendmsg call that specifies a NULL value for the remote address field.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 2.6.36.2
SuseLinux Enterprise Desktop
Version 10
SuseLinux Enterprise Real Time Extension
Version 11
SuseLinux Enterprise Server
Versions 9, 10
SuseLinux Enterprise Software Development Kit
Version 10
DebianDebian Linux
Version 5.0
CanonicalUbuntu Linux
Versions 6.06, 8.04, 9.10, 10.04, 10.10

Weakness classification

CWE-476

References