CVE-2010-4656

The iowarrior_write function in drivers/usb/misc/iowarrior.c in the Linux kernel before 2.6.37 does not properly allocate memory, which might allow local users to trigger a heap-based buffer overflow, and consequently cause a denial of service or gain privileges, via a long report.

• CWE-787

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3ed780117dbe5acb64280d218f0347f238dafed0
• http://openwall.com/lists/oss-security/2011/01/24/9Mailing List, Patch, Third Party Advisory
• http://openwall.com/lists/oss-security/2011/01/25/3Mailing List, Patch, Third Party Advisory
• http://openwall.com/lists/oss-security/2011/01/25/4Mailing List, Patch, Third Party Advisory
• http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37Broken Link
• http://www.securityfocus.com/bid/46069Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-1146-1Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=672420Issue Tracking, Patch, Third Party Advisory
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3ed780117dbe5acb64280d218f0347f238dafed0
• http://openwall.com/lists/oss-security/2011/01/24/9Mailing List, Patch, Third Party Advisory
• http://openwall.com/lists/oss-security/2011/01/25/3Mailing List, Patch, Third Party Advisory
• http://openwall.com/lists/oss-security/2011/01/25/4Mailing List, Patch, Third Party Advisory
• http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37Broken Link
• http://www.securityfocus.com/bid/46069Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-1146-1Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=672420Issue Tracking, Patch, Third Party Advisory

Published

Jul 18, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-4650Buffer overflow in the fuse_do_ioctl function in fs/fuse/fil…
• CVE-2010-4651Directory traversal vulnerability in util.c in GNU patch 2.6…
• CVE-2010-4652Heap-based buffer overflow in the sql_prepare_where function…
• CVE-2010-4653An integer overflow condition in poppler before 0.16.3 can o…6.5
• CVE-2010-4654poppler before 0.16.3 has malformed commands that may cause …7.8
• CVE-2010-4655net/core/ethtool.c in the Linux kernel before 2.6.36 does no…5.5
• CVE-2010-4657PHP5 before 5.4.4 allows passing invalid utf-8 strings via t…7.5
• CVE-2010-4658statusnet through 2010 allows attackers to spoof syslog mess…5.3
• CVE-2010-4659Cross-site scripting (XSS) vulnerability in statusnet throug…6.1
• CVE-2010-4660Unspecified vulnerability in statusnet through 2010 due to t…9.8
• CVE-2010-4661udisks before 1.0.3 allows a local user to load arbitrary Li…7.8
• CVE-2010-4662PmWiki before 2.2.21 has XSS.6.1