CVE-2010-3859
Multiple integer signedness errors in the TIPC implementation in the Linux kernel before 2.6.36.2...
6.9 Medium
Multiple integer signedness errors in the TIPC implementation in the Linux kernel before 2.6.36.2 allow local users to gain privileges via a crafted sendmsg call that triggers a heap-based buffer overflow, related to the tipc_msg_build function in net/tipc/msg.c and the verify_iovec function in net/core/iovec.c.
Exploit likelihood
0.40%Down 1.1 points since Feb 4, 2022
What each source reports
NVD Score used
Multiple integer signedness errors in the TIPC implementation in the Linux kernel before 2.6.36.2 allow local users to gain privileges via a crafted sendmsg call that triggers a heap-based buffer overflow, related to the tipc_msg_build function in net/tipc/msg.c and the verify_iovec function in net/core/iovec.c.
- Record
CVE-2010-3859- CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-787
- Updated
- 2026-11-02
CVE List No score
Multiple integer signedness errors in the TIPC implementation in the Linux kernel before 2.6.36.2 allow local users to gain privileges via a crafted sendmsg call that triggers a heap-based buffer overflow, related to the tipc_msg_build function in net/tipc/msg.c and the verify_iovec function in net/core/iovec.c.
- Record
CVE-2010-3859- Updated
- 2026-11-02
EUVDEUVD-2010-3838 No score
Multiple integer signedness errors in the TIPC implementation in the Linux kernel before 2.6.36.2 allow local users to gain privileges via a crafted sendmsg call that triggers a heap-based buffer overflow, related to the tipc_msg_build function in net/tipc/msg.c and the verify_iovec function in net/core/iovec.c.
- Record
EUVD-2010-3838- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vv88-7m9v-j3pp No score
Multiple integer signedness errors in the TIPC implementation in the Linux kernel before 2.6.36.2...
Multiple integer signedness errors in the TIPC implementation in the Linux kernel before 2.6.36.2 allow local users to gain privileges via a crafted sendmsg call that triggers a heap-based buffer overflow, related to the tipc_msg_build function in net/tipc/msg.c and the verify_iovec function in net/core/iovec.c.
- Record
GHSA-vv88-7m9v-j3pp- Weakness
- CWE-787
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linux-2.6Debian:5.0 From an advisory covering 33 CVEs |
before 2.6.26-26lenny1, plus listed versions 2.6.26-132.6.26-13lenny22.6.26-13lenny2~bpo40+12.6.26-142.6.26-15 Show 32 moreShow less2.6.26-15lenny12.6.26-15lenny22.6.26-15lenny32.6.26-15~bpo40+12.6.26-15~bpo40+22.6.26-162.6.26-172.6.26-17lenny12.6.26-17lenny22.6.26-17lenny2~bpo40+12.6.26-17~bpo40+12.6.26-182.6.26-192.6.26-19lenny12.6.26-19lenny22.6.26-19~bpo40+12.6.26-202.6.26-20~bpo40+12.6.26-212.6.26-21lenny12.6.26-21lenny22.6.26-21lenny32.6.26-21lenny42.6.26-21~bpo40+12.6.26-222.6.26-22lenny12.6.26-232.6.26-242.6.26-24lenny12.6.26-252.6.26-25lenny12.6.26-26 |
2.6.26-26lenny1 |
kernelRed Hat:enterprise_linux:5::client From an advisory covering 14 CVEs |
before 0:2.6.18-194.32.1.el5 | 0:2.6.18-194.32.1.el5 |
kernel-PAERed Hat:enterprise_linux:5::client From an advisory covering 14 CVEs |
before 0:2.6.18-194.32.1.el5 | 0:2.6.18-194.32.1.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 14 CVEs |
before 0:2.6.18-194.32.1.el5 | 0:2.6.18-194.32.1.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::client From an advisory covering 14 CVEs |
before 0:2.6.18-194.32.1.el5 | 0:2.6.18-194.32.1.el5 |
kernel-debugRed Hat:enterprise_linux:5::client From an advisory covering 14 CVEs |
before 0:2.6.18-194.32.1.el5 | 0:2.6.18-194.32.1.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 14 CVEs |
before 0:2.6.18-194.32.1.el5 | 0:2.6.18-194.32.1.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::client From an advisory covering 14 CVEs |
before 0:2.6.18-194.32.1.el5 | 0:2.6.18-194.32.1.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 14 CVEs |
before 0:2.6.18-194.32.1.el5 | 0:2.6.18-194.32.1.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::client From an advisory covering 14 CVEs |
before 0:2.6.18-194.32.1.el5 | 0:2.6.18-194.32.1.el5 |
Show 72 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-develRed Hat:enterprise_linux:5::client From an advisory covering 14 CVEs |
before 0:2.6.18-194.32.1.el5 | 0:2.6.18-194.32.1.el5 |
kernel-docRed Hat:enterprise_linux:5::client From an advisory covering 14 CVEs |
before 0:2.6.18-194.32.1.el5 | 0:2.6.18-194.32.1.el5 |
kernel-headersRed Hat:enterprise_linux:5::client From an advisory covering 14 CVEs |
before 0:2.6.18-194.32.1.el5 | 0:2.6.18-194.32.1.el5 |
kernel-xenRed Hat:enterprise_linux:5::client From an advisory covering 14 CVEs |
before 0:2.6.18-194.32.1.el5 | 0:2.6.18-194.32.1.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 14 CVEs |
before 0:2.6.18-194.32.1.el5 | 0:2.6.18-194.32.1.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::client From an advisory covering 14 CVEs |
before 0:2.6.18-194.32.1.el5 | 0:2.6.18-194.32.1.el5 |
kernelRed Hat:enterprise_linux:5::server From an advisory covering 14 CVEs |
before 0:2.6.18-194.32.1.el5 | 0:2.6.18-194.32.1.el5 |
kernel-PAERed Hat:enterprise_linux:5::server From an advisory covering 14 CVEs |
before 0:2.6.18-194.32.1.el5 | 0:2.6.18-194.32.1.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 14 CVEs |
before 0:2.6.18-194.32.1.el5 | 0:2.6.18-194.32.1.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::server From an advisory covering 14 CVEs |
before 0:2.6.18-194.32.1.el5 | 0:2.6.18-194.32.1.el5 |
kernel-debugRed Hat:enterprise_linux:5::server From an advisory covering 14 CVEs |
before 0:2.6.18-194.32.1.el5 | 0:2.6.18-194.32.1.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 14 CVEs |
before 0:2.6.18-194.32.1.el5 | 0:2.6.18-194.32.1.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::server From an advisory covering 14 CVEs |
before 0:2.6.18-194.32.1.el5 | 0:2.6.18-194.32.1.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 14 CVEs |
before 0:2.6.18-194.32.1.el5 | 0:2.6.18-194.32.1.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::server From an advisory covering 14 CVEs |
before 0:2.6.18-194.32.1.el5 | 0:2.6.18-194.32.1.el5 |
kernel-develRed Hat:enterprise_linux:5::server From an advisory covering 14 CVEs |
before 0:2.6.18-194.32.1.el5 | 0:2.6.18-194.32.1.el5 |
kernel-docRed Hat:enterprise_linux:5::server From an advisory covering 14 CVEs |
before 0:2.6.18-194.32.1.el5 | 0:2.6.18-194.32.1.el5 |
kernel-headersRed Hat:enterprise_linux:5::server From an advisory covering 14 CVEs |
before 0:2.6.18-194.32.1.el5 | 0:2.6.18-194.32.1.el5 |
kernel-kdumpRed Hat:enterprise_linux:5::server From an advisory covering 14 CVEs |
before 0:2.6.18-194.32.1.el5 | 0:2.6.18-194.32.1.el5 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 14 CVEs |
before 0:2.6.18-194.32.1.el5 | 0:2.6.18-194.32.1.el5 |
kernel-kdump-develRed Hat:enterprise_linux:5::server From an advisory covering 14 CVEs |
before 0:2.6.18-194.32.1.el5 | 0:2.6.18-194.32.1.el5 |
kernel-xenRed Hat:enterprise_linux:5::server From an advisory covering 14 CVEs |
before 0:2.6.18-194.32.1.el5 | 0:2.6.18-194.32.1.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 14 CVEs |
before 0:2.6.18-194.32.1.el5 | 0:2.6.18-194.32.1.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::server From an advisory covering 14 CVEs |
before 0:2.6.18-194.32.1.el5 | 0:2.6.18-194.32.1.el5 |
kernelRed Hat:enterprise_linux:4::as From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-develRed Hat:enterprise_linux:4::as From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-docRed Hat:enterprise_linux:4::as From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-hugememRed Hat:enterprise_linux:4::as From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::as From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-largesmpRed Hat:enterprise_linux:4::as From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::as From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-smpRed Hat:enterprise_linux:4::as From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-smp-develRed Hat:enterprise_linux:4::as From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-xenURed Hat:enterprise_linux:4::as From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::as From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernelRed Hat:enterprise_linux:4::desktop From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-develRed Hat:enterprise_linux:4::desktop From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-docRed Hat:enterprise_linux:4::desktop From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-hugememRed Hat:enterprise_linux:4::desktop From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::desktop From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-largesmpRed Hat:enterprise_linux:4::desktop From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-smpRed Hat:enterprise_linux:4::desktop From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-smp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-xenURed Hat:enterprise_linux:4::desktop From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::desktop From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernelRed Hat:enterprise_linux:4::es From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-develRed Hat:enterprise_linux:4::es From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-docRed Hat:enterprise_linux:4::es From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-hugememRed Hat:enterprise_linux:4::es From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::es From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-largesmpRed Hat:enterprise_linux:4::es From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::es From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-smpRed Hat:enterprise_linux:4::es From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-smp-develRed Hat:enterprise_linux:4::es From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-xenURed Hat:enterprise_linux:4::es From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::es From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernelRed Hat:enterprise_linux:4::ws From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-develRed Hat:enterprise_linux:4::ws From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-docRed Hat:enterprise_linux:4::ws From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-hugememRed Hat:enterprise_linux:4::ws From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::ws From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-largesmpRed Hat:enterprise_linux:4::ws From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::ws From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-smpRed Hat:enterprise_linux:4::ws From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-smp-develRed Hat:enterprise_linux:4::ws From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-xenURed Hat:enterprise_linux:4::ws From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::ws From an advisory covering 11 CVEs |
before 0:2.6.9-89.35.1.EL | 0:2.6.9-89.35.1.EL |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-3859 is a medium vulnerability (CVSS 6.9) in Debian Linux, published November 26, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.40%, the 34th percentile. No source names a fixed version.
References
secunia.com/advisories/42789
vupen.com/english/advisories/2011/0024
redhat.com/support/errata/RHSA-2011-0004.html
marc.info?l=linux-netdev&m=128770476511716&w=2
spinics.net/lists/netdev/msg145264.html
securityfocus.com/archive/1/520102/100/0/threaded
Show 135 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=645867
kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36.2
openwall.com/lists/oss-security/2010/10/22/2
vmware.com/security/advisories/VMSA-2011-0012.html
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8acfe468b0384e834a303f08ebc4953d72fb690a
mandriva.com/security/advisories?name=MDVSA-2011:029
debian.org/security/2010/dsa-2126
nvd.nist.gov/vuln/detail/CVE-2010-3859
github.com/advisories/GHSA-vv88-7m9v-j3pp
access.redhat.com/errata/RHSA-2011:0004
docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5/html/5.5_Technical_Notes/kernel.html
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0004.json
cve.org/CVERecord?id=CVE-2010-3432