CVE-2010-4243

fs/exec.c in the Linux kernel before 2.6.37 does not enable the OOM Killer to assess use of stack memory by arrays representing the (1) arguments and (2) environment, which allows local users to cause a denial of service (memory consumption) via a crafted exec system call, aka an "OOM dodging issue," a related issue to CVE-2010-3858.

CVSS v2.0

4.9 MEDIUMAV:L/AC:L/Au:N/C:N/I:N/A:C

EPSS

0.91% chance of exploitation in the next 30 days, 58th percentile

Published

2011-01-22

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/15619

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/15619

References

• CVE Record
• NVD entry

Related

• CVE-2010-4241
• CVE-2010-4246
• CVE-2010-4240
• CVE-2010-4249
• CVE-2010-4239
• CVE-2010-4250