Attacker Value
Unknown
CVE-2010-3904
CVE-2010-3904
(Last updated June 28, 2024) ▾
MITRE ATT&CK
Log in to add MITRE ATT&CK tag
Add MITRE ATT&CK tactics and techniques that apply to this CVE.
Metasploit Module
Description
The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.
Add Assessment
No one has assessed this topic. Be the first to add your voice to the community.
CVSS V3 Severity and Metrics
Data provided by the National Vulnerability Database (NVD)
Base Score:
7.8 High
Impact Score:
5.9
Exploitability Score:
1.8
Attack Vector (AV):
Local
Attack Complexity (AC):
Low
Privileges Required (PR):
Low
User Interaction (UI):
None
Scope (S):
Unchanged
Confidentiality (C):
High
Integrity (I):
High
Availability (A):
High
General Information
Products
- enterprise linux 5.0,
- enterprise linux 6.0,
- esxi 3.5,
- esxi 4.0,
- esxi 4.1,
- esxi 5.0,
- linux enterprise desktop 11,
- linux enterprise real time extension 11,
- linux enterprise server 11,
- linux kernel,
- opensuse 11.2,
- opensuse 11.3,
- ubuntu linux 10.04,
- ubuntu linux 10.10,
- ubuntu linux 6.06,
- ubuntu linux 8.04,
- ubuntu linux 9.04,
- ubuntu linux 9.10
Metasploit Modules
Exploited in the Wild
References
Advisory
