CVE-2010-1451 Privilege escalation in n/a
Local attackers can exploit stack-based buffer overflows on SPARC Linux kernels due to missing non-executable stack enforcement, leading to privilege escalation.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2010-1451?
CVE-2010-1451 is a low-severity vulnerability in Debian Debian Linux, published on 7 May 2010. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
The TSB I-TLB load implementation in arch/sparc/kernel/tsb.S in the Linux kernel before 2.6.33 on the SPARC platform does not properly obtain the value of a certain _PAGE_EXEC_4U bit and consequently does not properly implement a non-executable stack, which makes it easier for context-dependent attackers to exploit stack-based buffer overflows via a crafted application.
Weakness: CWE-787
Which versions are affected by CVE-2010-1451?
It affects 2 products.
Products include Debian Debian Linux, Linux kernel.
How do I fix CVE-2010-1451?
Upgrade to a fixed version.
Is CVE-2010-1451 being exploited?
There is no known exploitation of CVE-2010-1451 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as GHSA-37fx-p8jg-8c9r.