TI-2010-03655 Aliases CVE-2010-3848 GHSA-jg69-hq9p-75r5

Stack-based buffer overflow in the econet_sendmsg function in net/econet/af_econet.c in…

LOW 32CWE-787Published 2010-12-30 · Updated 2024-08-07

Key facts

Attack vector: Local
Privileges required: None
User interaction: — Not recorded in CVSS 2.0
Attack complexity: Medium
Impact type: Code execution
Confidentiality · integrity · availability: Complete · Complete · Complete
Fix status: No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-787 and the CVSS impact.

Summary

Stack-based buffer overflow in the econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users to gain privileges by providing a large number of iovec structures.

Why it matters now

EPSS 0.00703 53rd percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 12

CPE	Versions	Role	Vendor
cpe:2.3:o:linux:linux_kernel::::::::	before 2.6.36.2	Vulnerable	Linux
cpe:2.3:o:suse:linux_enterprise_desktop:10:sp3::::::	10 sp3	Vulnerable	SUSE
cpe:2.3:o:suse:linux_enterprise_real_time_extension:11:sp1::::::	11 sp1	Vulnerable	SUSE
cpe:2.3:o:suse:linux_enterprise_server:9:::::::*	9	Vulnerable	SUSE
cpe:2.3:o:suse:linux_enterprise_server:10:sp3::::::	10 sp3	Vulnerable	SUSE
cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp3::::::	10 sp3	Vulnerable	SUSE
cpe:2.3:o:debian:debian_linux:5.0:::::::*	5.0	Vulnerable	Debian
cpe:2.3:o:canonical:ubuntu_linux:6.06:::::::*	6.06	Vulnerable	Canonical
cpe:2.3:o:canonical:ubuntu_linux:8.04::::-:::	8.04	Vulnerable	Canonical
cpe:2.3:o:canonical:ubuntu_linux:9.10:::::::*	9.10	Vulnerable	Canonical

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions before 2.6.36.2 Vulnerable ·Linux
cpe:2.3:o:suse:linux_enterprise_desktop:10:sp3:*:*:*:*:*:* Versions 10 sp3 Vulnerable ·SUSE
cpe:2.3:o:suse:linux_enterprise_real_time_extension:11:sp1:*:*:*:*:*:* Versions 11 sp1 Vulnerable ·SUSE
cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:* Versions 9 Vulnerable ·SUSE
cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:*:*:*:* Versions 10 sp3 Vulnerable ·SUSE
cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp3:*:*:*:*:*:* Versions 10 sp3 Vulnerable ·SUSE
cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Debian
cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:* Versions 6.06 Vulnerable ·Canonical
cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:* Versions 8.04 Vulnerable ·Canonical
cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:* Versions 9.10 Vulnerable ·Canonical

Show 2 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:o:canonical:ubuntu_linux:10.04::::-:::	10.04	Vulnerable	Canonical
cpe:2.3:o:canonical:ubuntu_linux:10.10:::::::*	10.10	Vulnerable	Canonical

cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:* Versions 10.04 Vulnerable ·Canonical
cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:* Versions 10.10 Vulnerable ·Canonical

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product

Red Hat

Timeline

2026-10-02 Threatist record created from CVE-2010-3848
2026-10-03 Alias added: GHSA-jg69-hq9p-75r5

References

Patch 2

Advisory 9

Other 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences