CVE-2010-2959 PUBLISHED CVSS 9.300000190734863 CRITICAL

Integer overflow in net/can/bcm.c in the Controller Area Network (CAN) implementation in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6, and 2.6.35.x before 2.6.35.4 allows attackers to execute arbitrary code or cause a denial of service (system crash) via crafted CAN traffic.

EPSS 0.34% · 56.9th percentile

Risk Scores

CVSS v4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.34%
56.9th percentile

Affected Products

VendorProductVersions
suselinux_enterprise_real_time11
debiandebian_linux5.0
suselinux_enterprise_desktop11
suselinux_enterprise_server11
suselinux_enterprise_high_availability_extension11
n/an/an/a
opensuseopensuse11.3
fedoraprojectfedora12
linuxlinux_kernel2.6.32, 2.6.34, 2.6.35

Timeline

References

Open in Interactive Console →