Description
Integer overflow in the rds_cmsg_rdma_args function (net/rds/rdma.c) in Linux kernel 2.6.35 allows local users to cause a denial of service (crash) and possibly trigger memory corruption via a crafted Reliable Datagram Sockets (RDS) request, a different vulnerability than CVE-2010-3865.
References
- SUSE-SA:2011:004 vendor-advisory
- 42778 third-party-advisory
- 42801 third-party-advisory
- SUSE-SA:2011:002 vendor-advisory
- SUSE-SA:2011:001 vendor-advisory
- 42932 third-party-advisory
- [linux-netdev] 20101117 [PATCH] Integer overflow in RDS cmsg handling mailing-list
- ADV-2011-0124 vdb-entry
- SUSE-SA:2011:007 vendor-advisory
- ADV-2011-0298 vdb-entry
- 44921 vdb-entry
- ADV-2011-0012 vdb-entry
- [oss-security] 20101118 Re: CVE request: kernel: integer overflow in RDS mailing-list
- [oss-security] 20101117 CVE request: kernel: integer overflow in RDS mailing-list
- kernel-rdscmsgrdmaargs-dos(64618) vdb-entry