4.9

CVE-2010-0453

The ucode_ioctl function in intel/io/ucode_drv.c in Sun Solaris 10 and OpenSolaris snv_69 through snv_133, when running on x86 architectures, allows local users to cause a denial of service (panic) via a request with a 0 size value to the UCODE_GET_VERSION IOCTL, which triggers a NULL pointer dereference in the ucode_get_rev function, related to retrieval of the microcode revision.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sun ≫ Opensolaris Version snv_69 Edition x86
Sun ≫ Opensolaris Version snv_70 Edition x86
Sun ≫ Opensolaris Version snv_71 Edition x86
Sun ≫ Opensolaris Version snv_72 Edition x86
Sun ≫ Opensolaris Version snv_73 Edition x86
Sun ≫ Opensolaris Version snv_74 Edition x86
Sun ≫ Opensolaris Version snv_75 Edition x86
Sun ≫ Opensolaris Version snv_76 Edition x86
Sun ≫ Opensolaris Version snv_77 Edition x86
Sun ≫ Opensolaris Version snv_78 Edition x86
Sun ≫ Opensolaris Version snv_79 Edition x86
Sun ≫ Opensolaris Version snv_80 Edition x86
Sun ≫ Opensolaris Version snv_81 Edition x86
Sun ≫ Opensolaris Version snv_82 Edition x86
Sun ≫ Opensolaris Version snv_83 Edition x86
Sun ≫ Opensolaris Version snv_84 Edition x86
Sun ≫ Opensolaris Version snv_85 Edition x86
Sun ≫ Opensolaris Version snv_86 Edition x86
Sun ≫ Opensolaris Version snv_87 Edition x86
Sun ≫ Opensolaris Version snv_88 Edition x86
Sun ≫ Opensolaris Version snv_89 Edition x86
Sun ≫ Opensolaris Version snv_90 Edition x86
Sun ≫ Opensolaris Version snv_91 Edition x86
Sun ≫ Opensolaris Version snv_92 Edition x86
Sun ≫ Opensolaris Version snv_93 Edition x86
Sun ≫ Opensolaris Version snv_94 Edition x86
Sun ≫ Opensolaris Version snv_95 Edition x86
Sun ≫ Opensolaris Version snv_96 Edition x86
Sun ≫ Opensolaris Version snv_97 Edition x86
Sun ≫ Opensolaris Version snv_98 Edition x86
Sun ≫ Opensolaris Version snv_99 Edition x86
Sun ≫ Opensolaris Version snv_100 Edition x86
Sun ≫ Opensolaris Version snv_101 Edition x86
Sun ≫ Opensolaris Version snv_102 Edition x86
Sun ≫ Opensolaris Version snv_103 Edition x86
Sun ≫ Opensolaris Version snv_104 Edition x86
Sun ≫ Opensolaris Version snv_105 Edition x86
Sun ≫ Opensolaris Version snv_106 Edition x86
Sun ≫ Opensolaris Version snv_107 Edition x86
Sun ≫ Opensolaris Version snv_108 Edition x86
Sun ≫ Opensolaris Version snv_109 Edition x86
Sun ≫ Opensolaris Version snv_110 Edition x86
Sun ≫ Opensolaris Version snv_111 Edition x86
Sun ≫ Opensolaris Version snv_112 Edition x86
Sun ≫ Opensolaris Version snv_113 Edition x86
Sun ≫ Opensolaris Version snv_114 Edition x86
Sun ≫ Opensolaris Version snv_115 Edition x86
Sun ≫ Opensolaris Version snv_116 Edition x86
Sun ≫ Opensolaris Version snv_117 Edition x86
Sun ≫ Opensolaris Version snv_118 Edition x86
Sun ≫ Opensolaris Version snv_119 Edition x86
Sun ≫ Opensolaris Version snv_120 Edition x86
Sun ≫ Opensolaris Version snv_121 Edition x86
Sun ≫ Opensolaris Version snv_122 Edition x86
Sun ≫ Opensolaris Version snv_123 Edition x86
Sun ≫ Opensolaris Version snv_124 Edition x86
Sun ≫ Opensolaris Version snv_125 Edition x86
Sun ≫ Opensolaris Version snv_126 Edition x86
Sun ≫ Opensolaris Version snv_127 Edition x86
Sun ≫ Opensolaris Version snv_128 Edition x86
Sun ≫ Opensolaris Version snv_129 Edition x86
Sun ≫ Opensolaris Version snv_130 Edition x86
Sun ≫ Opensolaris Version snv_131 Edition x86
Sun ≫ Opensolaris Version snv_132 Edition x86
Sun ≫ Opensolaris Version snv_133 Edition x86
Sun ≫ Solaris Version 10.0 Edition x86
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.84% 0.53
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.9 3.9 6.9
AV:L/AC:L/Au:N/C:N/I:N/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html
http://www.us-cert.gov/cas/techalerts/TA10-103B.html
US Government Resource
http://osvdb.org/62046
http://secunia.com/advisories/38452
Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-21-143913-01-1
Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-66-275910-1
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021799.1-1
http://www.securityfocus.com/archive/1/509276/100/0/threaded
http://www.securityfocus.com/bid/38016
http://www.trapkit.de/advisories/TKADV2010-001.txt
http://www.vupen.com/english/advisories/2010/0270
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/55991
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6959