CVE-2010-2959

Low

Low Medium High Critical

CVSS Score

Published: Sep 08, 2010

Last Modified: Apr 11, 2025

Vulnerability Description

Integer overflow in net/can/bcm.c in the Controller Area Network (CAN) implementation in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6, and 2.6.35.x before 2.6.35.4 allows attackers to execute arbitrary code or cause a denial of service (system crash) via crafted CAN traffic.

Known Affected Software

7 configuration(s) from 4 vendor(s)

debian_linux

Version:

5.0

CPE:

cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*

fedora

Version:

CPE:

cpe:2.3:o:fedoraproject:fedora:12:*:*:*:*:*:*:*

opensuse

Version:

11.3

CPE:

cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:*

linux_enterprise_real_time

Version:

CPE:

cpe:2.3:o:suse:linux_enterprise_real_time:11:sp1:*:*:*:*:*:*

linux_enterprise_high_availability_extension

Version:

CPE:

cpe:2.3:o:suse:linux_enterprise_high_availability_extension:11:-:*:*:*:*:*:*

linux_enterprise_server

Version:

CPE:

cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:-:*:*:*

linux_enterprise_desktop

Version:

CPE:

cpe:2.3:o:suse:linux_enterprise_desktop:11:-:*:*:*:*:*:*

This vulnerability affects 7 software configuration(s). Ensure you patch all affected systems.

References & Resources

Severity Details

out of 10.0

Low

Weakness Type (CWE)

CWE-190 Top 25 #22

Integer Overflow or Wraparound

Description: The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value…
Exploit Likelihood: Medium
Typical Severity: High
Abstraction Level: Base