CWE Code: 189
Vulnerability Type: privilege_escalation
CVSS Score: 6.9
CWE Name:  Numeric Errors
Summary: multiple integer signedness errors in the tipc implementation in the linux kernel before 2.6.36.2 allow local users to gain privileges via a crafted sendmsg call that triggers a heap-based buffer overflow, related to the tipc_msg_build function in net/tipc/msg.c and the verify_iovec function in net/core/iovec.c.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2010-12-29
Last Modified Date: 2018-10-10