EDB-15619

PoC

Linux Kernel 2.6.37 - 'setup_arg_pages()' Denial of Service

view exploit source exploit_dbtype dosauthor Roland McGrathpublished 2010-11-26catalog exploit_db

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2010-4243US	medium4.9	0.91% (60th)	Exploit	2011-01-22
fs/exec.c in the Linux kernel before 2.6.37 does not enable the OOM Killer to assess use of stack memory by arrays representing the (1) arguments and (2) environment, which allows…
CVE-2010-3858US	medium4.9	0.91% (60th)	Exploit	2010-11-30
The setup_arg_pages function in fs/exec.c in the Linux kernel before 2.6.36, when CONFIG_STACK_GROWSDOWN is used, does not properly restrict the stack memory consumption of the (1)…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.