CVE - CVE-2010-1451

CVE-ID
CVE-2010-1451	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The TSB I-TLB load implementation in arch/sparc/kernel/tsb.S in the Linux kernel before 2.6.33 on the SPARC platform does not properly obtain the value of a certain _PAGE_EXEC_4U bit and consequently does not properly implement a non-executable stack, which makes it easier for context-dependent attackers to exploit stack-based buffer overflows via a crafted application.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:39830 URL:http://secunia.com/advisories/39830 MISC:DSA-2053 URL:http://www.debian.org/security/2010/dsa-2053 MISC:[linux-sparc] 20100219 Execution possible in non-executable mappings in recent 2.6 kernels URL:http://marc.info/?l=linux-sparc&m=126662196902830&w=2 MISC:[linux-sparc] 20100219 Re: Execution possible in non-executable mappings in recent 2.6 kernels URL:http://marc.info/?l=linux-sparc&m=126662159602378&w=2 MISC:[oss-security] 20100224 kernel: execution possible in non-executable mappings in recent 2.6 kernels (SPARC only) URL:http://www.openwall.com/lists/oss-security/2010/02/24/1 MISC:[oss-security] 20100505 Re: CVE Request [was Re: kernel: execution possible in non-executable mappings in recent 2.6 kernels (SPARC only)] URL:http://www.openwall.com/lists/oss-security/2010/05/05/2 MISC:http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.33 URL:http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.33
Assigning CNA
Red Hat, Inc.
Date Record Created
20100415	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20100415)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)