CVE-2010-3310

Multiple integer signedness errors in net/rose/af_rose.c in the Linux kernel before 2.6.36-rc5-next-20100923 allow local users to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a rose_getname function call, related to the rose_bind and rose_connect functions.

• CWE-189

• http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=9828e6e6e3f19efcb476c567b9999891d051f52f
• http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00004.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.htmlMailing List, Third Party Advisory
• http://marc.info/?l=linux-netdev&m=128502238927086&w=2Mailing List, Third Party Advisory
• http://secunia.com/advisories/41493Third Party Advisory
• http://secunia.com/advisories/43291Third Party Advisory
• http://www.debian.org/security/2010/dsa-2126Third Party Advisory
• http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.36-rc5-next-20100923.bz2Patch, Vendor Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:029Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:051Third Party Advisory
• http://www.openwall.com/lists/oss-security/2010/09/21/1Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2010/09/21/2Mailing List, Third Party Advisory
• http://www.osvdb.org/68163Broken Link
• http://www.securityfocus.com/bid/43368Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-1000-1Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0298Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0375Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/61953Third Party Advisory, VDB Entry
• http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=9828e6e6e3f19efcb476c567b9999891d051f52f
• http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00004.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.htmlMailing List, Third Party Advisory
• http://marc.info/?l=linux-netdev&m=128502238927086&w=2Mailing List, Third Party Advisory
• http://secunia.com/advisories/41493Third Party Advisory
• http://secunia.com/advisories/43291Third Party Advisory
• http://www.debian.org/security/2010/dsa-2126Third Party Advisory
• http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.36-rc5-next-20100923.bz2Patch, Vendor Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:029Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:051Third Party Advisory
• http://www.openwall.com/lists/oss-security/2010/09/21/1Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2010/09/21/2Mailing List, Third Party Advisory
• http://www.osvdb.org/68163Broken Link
• http://www.securityfocus.com/bid/43368Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-1000-1Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0298Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0375Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/61953Third Party Advisory, VDB Entry

Published

Sep 29, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-3304The ACL plugin in Dovecot 1.2.x before 1.2.13 propagates INB…
• CVE-2010-3305Cross-site request forgery (CSRF) vulnerability in pixelpost…8.8
• CVE-2010-3306Directory traversal vulnerability in the modURL function in …
• CVE-2010-3307Multiple PHP remote file inclusion vulnerabilities in themes…
• CVE-2010-3308Buffer overflow in programs/pluto/xauth.c in the client in O…
• CVE-2010-3309Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2010-3311Integer overflow in base/ftstream.c in libXft (aka the X Fre…
• CVE-2010-3312Epiphany 2.28 and 2.29, when WebKit and LibSoup are used, un…
• CVE-2010-3313phpgwapi/js/fckeditor/editor/dialog/fck_spellerpages/speller…
• CVE-2010-3314Cross-site scripting (XSS) vulnerability in login.php in EGr…
• CVE-2010-3315authz.c in the mod_dav_svn module for the Apache HTTP Server…
• CVE-2010-3316The run_coprocess function in pam_xauth.c in the pam_xauth m…