CVE-2010-3849
EXPLOITEDLinux Kernel < 2.6.36.2 - Denial of Service via NULL Pointer Dereference in econet_sendmsg
Title source: llmExploitation Summary
CVE-2010-3849 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit.
AI-analyzed exploit summary This exploit leverages three vulnerabilities (CVE-2010-4258, CVE-2010-3849, CVE-2010-3850) to achieve local privilege escalation on Linux kernels <= 2.6.37. It uses the Econet protocol to trigger a NULL pointer dereference under KERNEL_DS, allowing arbitrary kernel memory writes.
Description
The econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a sendmsg call that specifies a NULL value for the remote address field.
Exploits (1)
This exploit leverages three vulnerabilities (CVE-2010-4258, CVE-2010-3849, CVE-2010-3850) to achieve local privilege escalation on Linux kernels <= 2.6.37. It uses the Econet protocol to trigger a NULL pointer dereference under KERNEL_DS, allowing arbitrary kernel memory writes.