CVE-2010-3904
published 2010-12-06CVE-2010-3904: The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not…
PriorityP182high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
KEVITWEXPLOIT
CISA Known Exploited Vulnerabilitydue 2023-06-02
Exploited in the wild
EPSS
12.16%
95.7th percentile
The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| linux | linux_kernel | < 2.6.36 | 2.6.36 |
| opensuse | opensuse | — | — |
| opensuse | opensuse | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| suse | linux_enterprise_desktop | — | — |
| suse | linux_enterprise_real_time_extension | — | — |
| suse | linux_enterprise_server | — | — |
| vmware | esxi | — | — |
| vmware | esxi | — | — |
| vmware | esxi | — | — |
| vmware | esxi | — | — |
| vmware | vmware_esxi | — | — |
| vmware | vmware_workstation | — | — |
| vmware | vsphere | — | — |
Detection & IOCsextracted from sources · hover to see the quote
urlhttp://web.archive.org/web/20101020044048/http://www.vsecurity.com/download/tools/linux-rds-exploit.c↗
- →Alert on reads of /proc/kallsyms or /boot/System.map-<release> by unprivileged processes — the exploit resolves kernel symbols (security_ops, default_security_ops, cap_ptrace_traceme, commit_creds, prepare_kernel_cred) as a prerequisite step. ↗
- →Check whether the rds kernel module is loaded on hosts running Linux kernel 2.6.30–2.6.36; its presence on non-RDS workloads is a strong indicator of exploitation risk or active exploitation. ↗
- →The exploit uses RDS UDP-like sockets on source port 6666 (SENDPORT) and destination port 5555 (RECVPORT) on loopback; local socket activity on these ports from unexpected processes should be investigated. ↗
- →Metasploit module drops a randomly named hidden executable (dot-prefixed alphanumeric name) into WritableDir (/tmp by default) and a separate payload executable; monitor for hidden executables created in /tmp followed by privilege escalation. ↗
- ·Vulnerable kernel range is 2.6.30 to 2.6.36-rc8 only; kernels outside this range (including RHEL 3/4/MRG which never shipped RDS support) are not affected. ↗
- ·The exploit checks /proc/sys/kernel/modules_disabled; if module loading is disabled AND rds is not already loaded, the exploit will fail — detection should account for pre-loaded rds module scenarios. ↗
- ·Blacklisting the rds module via /etc/modprobe.d/blacklist or aliasing net-pf-21 to off prevents accidental loading and blocks the exploit without a reboot, but only if the module is not already loaded. ↗
- ·The Metasploit module defaults to PAYLOAD linux/x86/meterpreter/reverse_tcp with PrependFork enabled and WfsDelay of 10 seconds; defenders should tune reverse-shell detection accordingly. ↗
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
vulncheck7.8HIGH
cisa7.8HIGH
vendor_redhat7.8HIGH
vendor_ubuntu7.2HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA
Linux Kernel Improper Input Validation Vulnerability
cisa·2023-05-12·CVSS 7.8
CVE-2010-3904 [HIGH] CWE-20 Linux Kernel Improper Input Validation Vulnerability
Vulnerability: Linux Kernel Improper Input Validation Vulnerability
Affected: Linux Kernel
Linux Kernel contains an improper input validation vulnerability in the Reliable Datagram Sockets (RDS) protocol implementation that allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.
Required Action: The impacted product is end-of-life and should be disconnected if still in use.
Notes: https://lkml.iu.edu/hypermail/linux/kernel/1601.3/06474.html; https://nvd.nist.gov/vuln/detail/CVE-2010-3904
Remediation Due Date: 2023-06-02
VMware
VMware ESX third party updates for Service Console packages glibc and dhcp
vendor_vmware·2011-10-12·CVSS 4.7
CVE-2010-0296 [MEDIUM] VMware ESX third party updates for Service Console packages glibc and dhcp
VMSA-2011-0012: VMware ESX third party updates for Service Console packages glibc and dhcp
a. ESX third party update for Service Console kernel This update takes the console OS kernel package to kernel-2.6.18-238.9.1 which resolves multiple security issues. The Common Vulnerabilities and Exposures project ( cve.mitre.org) has assigned the names CVE-2010-1083, CVE-2010-2492, CVE-2010-2798, CVE-2010-2938, CVE-2010-2942, CVE-2010-2943, CVE-2010-3015, CVE-2010-3066, CVE-2010-3067, CVE-2010-3078, CVE-2010-3086, CVE-2010-3296, CVE-2010-3432, CVE-2010-3442, CVE-2010-3477, CVE-2010-3699, CVE-2010-3858, CVE-2010-3859, CVE-2010-3865, CVE-2010-3876, CVE-2010-3877, CVE-2010-3880, CVE-2010-3904, CVE-2010-4072, CVE-2010-4073, CVE-2010-4075, CVE-2010-4080, CVE-2010-4081, CVE-2010-4083, CVE-2010-4157, CV
Ubuntu
Linux kernel (OMAP4) vulnerabilities
vendor_ubuntu·2011-04-20·CVSS 4.9
CVE-2010-2954 [MEDIUM] Linux kernel (OMAP4) vulnerabilities
Title: Linux kernel (OMAP4) vulnerabilities
Summary: Multiple security flaws have been fixed in the OMAP4 port of the Linux kernel.
Dan Rosenberg discovered that the RDS network protocol did not correctly
check certain parameters. A local attacker could exploit this gain root
privileges. (CVE-2010-3904)
Nelson Elhage discovered several problems with the Acorn Econet protocol
driver. A local user could cause a denial of service via a NULL pointer
dereference, escalate privileges by overflowing the kernel stack, and
assign Econet addresses to arbitrary interfaces. (CVE-2010-3848,
CVE-2010-3849, CVE-2010-3850)
Ben Hawkes discovered that the Linux kernel did not correctly validate
memory ranges on 64bit kernels when allocating memory on behalf of 32bit
system calls. On a 64bit system, a lo
Ubuntu
Linux Kernel vulnerabilities (Marvell Dove)
vendor_ubuntu·2011-03-25·CVSS 7.2
CVE-2010-2478 [HIGH] Linux Kernel vulnerabilities (Marvell Dove)
Title: Linux Kernel vulnerabilities (Marvell Dove)
Summary: An attacker could send crafted input to the kernel and cause it to
crash.
Dan Rosenberg discovered that the RDS network protocol did not correctly
check certain parameters. A local attacker could exploit this gain root
privileges. (CVE-2010-3904)
Nelson Elhage discovered several problems with the Acorn Econet protocol
driver. A local user could cause a denial of service via a NULL pointer
dereference, escalate privileges by overflowing the kernel stack, and
assign Econet addresses to arbitrary interfaces. (CVE-2010-3848,
CVE-2010-3849, CVE-2010-3850)
Ben Hutchings discovered that the ethtool interface did not correctly check
certain sizes. A local attacker could perform malicious ioctl calls that
could crash the system, leadin
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2011-03-03·CVSS 4.7
CVE-2009-4895 [MEDIUM] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Multiple kernel flaws.
Dan Rosenberg discovered that the RDS network protocol did not correctly
check certain parameters. A local attacker could exploit this gain root
privileges. (CVE-2010-3904)
Nelson Elhage discovered several problems with the Acorn Econet protocol
driver. A local user could cause a denial of service via a NULL pointer
dereference, escalate privileges by overflowing the kernel stack, and
assign Econet addresses to arbitrary interfaces. (CVE-2010-3848,
CVE-2010-3849, CVE-2010-3850)
Ben Hawkes discovered that the Linux kernel did not correctly filter
registers on 64bit kernels when performing 32bit system calls. On a 64bit
system, a local attacker could manipulate 32bit system calls to gain root
privileges. (CVE-2010-3301)
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2011-02-28·CVSS 4.7
CVE-2009-4895 [MEDIUM] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Multiple kernel flaws.
Dan Rosenberg discovered that the RDS network protocol did not correctly
check certain parameters. A local attacker could exploit this gain root
privileges. (CVE-2010-3904)
Nelson Elhage discovered several problems with the Acorn Econet protocol
driver. A local user could cause a denial of service via a NULL pointer
dereference, escalate privileges by overflowing the kernel stack, and
assign Econet addresses to arbitrary interfaces. (CVE-2010-3848,
CVE-2010-3849, CVE-2010-3850)
Ben Hawkes discovered that the Linux kernel did not correctly filter
registers on 64bit kernels when performing 32bit system calls. On a 64bit
system, a local attacker could manipulate 32bit system calls to gain root
privileges. (CVE-2010-3301)
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2011-02-25·CVSS 4.7
CVE-2009-4895 [MEDIUM] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Multiple kernel flaws.
Al Viro discovered a race condition in the TTY driver. A local attacker
could exploit this to crash the system, leading to a denial of service.
(CVE-2009-4895)
Dan Rosenberg discovered that the MOVE_EXT ext4 ioctl did not correctly
check file permissions. A local attacker could overwrite append-only files,
leading to potential data loss. (CVE-2010-2066)
Dan Rosenberg discovered that the swapexit xfs ioctl did not correctly
check file permissions. A local attacker could exploit this to read from
write-only files, leading to a loss of privacy. (CVE-2010-2226)
Gael Delalleu, Rafal Wojtczuk, and Brad Spengler discovered that the memory
manager did not properly handle when applications grow stacks into adjacent
memory regi
Red Hat
kernel: RDS sockets local privilege escalation
vendor_redhat·2010-10-19·CVSS 7.8
CVE-2010-3904 [HIGH] CWE-119 kernel: RDS sockets local privilege escalation
kernel: RDS sockets local privilege escalation
The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.
Statement: The Linux kernel as shipped with Red Hat Enterprise Linux 3, 4 and Red Hat Enterprise MRG did not include support for the RDS Protocol, and therefore are not affected by this issue. Updates for Red Hat Enterprise Linux 5 and 6 are available to address this flaw.
Mitigation: For users that do not run applications that use RDS, you can prevent the rds module from being loaded by adding the following entry to the end of the /et
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2010-10-19·CVSS 4.7
CVE-2010-2525 [MEDIUM] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Multiple security issues fixed.
Dan Rosenberg discovered that the RDS network protocol did not correctly
check certain parameters. A local attacker could exploit this gain root
privileges. (CVE-2010-3904)
Al Viro discovered a race condition in the TTY driver. A local attacker
could exploit this to crash the system, leading to a denial of service.
(CVE-2009-4895)
Dan Rosenberg discovered that the MOVE_EXT ext4 ioctl did not correctly
check file permissions. A local attacker could overwrite append-only files,
leading to potential data loss. (CVE-2010-2066)
Dan Rosenberg discovered that the swapexit xfs ioctl did not correctly
check file permissions. A local attacker could exploit this to read from
write-only files, leading to a loss of privac
GHSA
GHSA-92x6-4gf8-7hcj: The rds_page_copy_user function in net/rds/page
ghsa_unreviewed·2022-05-13
CVE-2010-3904 [HIGH] CWE-1284 GHSA-92x6-4gf8-7hcj: The rds_page_copy_user function in net/rds/page
The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.
VulnCheck
Linux Kernel Improper Input Validation Vulnerability
vulncheck·2010·CVSS 7.8
CVE-2010-3904 [HIGH] CWE-20 Linux Kernel Improper Input Validation Vulnerability
Linux Kernel Improper Input Validation Vulnerability
Linux Kernel contains an improper input validation vulnerability in the Reliable Datagram Sockets (RDS) protocol implementation that allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.
Affected: Linux Kernel
Required Action: The impacted product is end-of-life and should be disconnected if still in use.
Exploitation References: https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json
Exploit PoC: https://vulncheck.com/xdb/5cf258448d69
Remediation Due: 2023-06-02
No detection rules found.
Exploit-DB
Linux 2.6.30 < 2.6.36-rc8 - Reliable Datagram Sockets (RDS) Privilege Escalation (Metasploit)
exploitdb·2018-05-21·CVSS 7.8
CVE-2010-3904 [HIGH] Linux 2.6.30 < 2.6.36-rc8 - Reliable Datagram Sockets (RDS) Privilege Escalation (Metasploit)
Linux 2.6.30 'Reliable Datagram Sockets (RDS) Privilege Escalation',
'Description' => %q{
This module exploits a vulnerability in the rds_page_copy_user function
in net/rds/page.c (RDS) in Linux kernel versions 2.6.30 to 2.6.36-rc8
to execute code as root (CVE-2010-3904).
This module has been tested successfully on Fedora 13 (i686) with
kernel version 2.6.33.3-85.fc13.i686.PAE and Ubuntu 10.04 (x86_64)
with kernel version 2.6.32-21-generic.
},
'License' => MSF_LICENSE,
'Author' =>
[
'Dan Rosenberg', # Discovery and C exploit
'Brendan Coles' # Metasploit
],
'DisclosureDate' => 'Oct 20 2010',
'Platform' => [ 'linux' ],
'Arch' => [ ARCH_X86, ARCH_X64 ],
'SessionTypes' => [ 'shell', 'meterpreter' ],
'Targets' => [[ 'Auto', {} ]],
'Privileged' => true,
'References' =>
[
[ 'AKA', 'rds-fail.c' ]
Exploit-DB
Linux Kernel 2.6.36-rc8 - 'RDS Protocol' Local Privilege Escalation
exploitdb·2010-10-19·CVSS 7.8
CVE-2010-3904 [HIGH] Linux Kernel 2.6.36-rc8 - 'RDS Protocol' Local Privilege Escalation
Linux Kernel 2.6.36-rc8 - 'RDS Protocol' Local Privilege Escalation
---
// source: http://www.vsecurity.com/resources/advisory/20101019-1/
/*
* Linux Kernel
*
* Copyright 2010 Virtual Security Research, LLC
*
* The handling functions for sending and receiving RDS messages
* use unchecked __copy_*_user_inatomic functions without any
* access checks on user-provided pointers. As a result, by
* passing a kernel address as an iovec base address in recvmsg-style
* calls, a local user can overwrite arbitrary kernel memory, which
* can easily be used to escalate privileges to root. Alternatively,
* an arbitrary kernel read can be performed via sendmsg calls.
*
* This exploit is simple - it resolves a few kernel symbols,
* sets the security_ops to the default structure, then overwrites
* a func
Metasploit
Reliable Datagram Sockets (RDS) rds_page_copy_user Privilege Escalation
metasploit·CVSS 7.8
CVE-2010-3904 [HIGH] Reliable Datagram Sockets (RDS) rds_page_copy_user Privilege Escalation
Reliable Datagram Sockets (RDS) rds_page_copy_user Privilege Escalation
This module exploits a vulnerability in the `rds_page_copy_user` function in `net/rds/page.c` (RDS) in Linux kernel versions 2.6.30 to 2.6.36-rc8 to execute code as root (CVE-2010-3904). This module has been tested successfully on: Fedora 13 (i686) kernel version 2.6.33.3-85.fc13.i686.PAE; and Ubuntu 10.04 (x86_64) with kernel version 2.6.32-21-generic.
Bugzilla
CVE-2011-1023 kernel: BUG_ON() in rds_send_xmit()
bugzilla·2011-02-25·CVSS 7.8
CVE-2011-1023 [HIGH] CVE-2011-1023 kernel: BUG_ON() in rds_send_xmit()
CVE-2011-1023 kernel: BUG_ON() in rds_send_xmit()
Found internally when testing CVE-2010-3904.
kernel BUG at net/rds/send.c:329!
Oops: Exception in kernel mode, sig: 5 [#1]
SMP NR_CPUS=1024 NUMA pSeries
Modules linked in: rds sunrpc ipv6 dm_mirror dm_region_hash dm_log ibmveth sg
ext4 jbd2 mbcache sd_mod crc_t10dif ibmvscsic scsi_transport_srp scsi_tgt
dm_mod [last unloaded: scsi_wait_scan]
NIP: d000000003ca68f4 LR: d000000003ca67fc CTR: d000000003ca8770
REGS: c000000175cab980 TRAP: 0700 Not tainted (2.6.32-118.el6.ppc64)
MSR: 8000000000029032 CR: 44000022 XER: 00000000
TASK = c00000017586ec90[1896] 'krdsd' THREAD: c000000175ca8000 CPU: 0
GPR00: 0000000000000150 c000000175cabc00 d000000003cb7340 0000000000002030
GPR04: ffffffffffffffff 0000000000000030 0000000000000000 0000000000000030
G
Bugzilla
CVE-2010-3904 kernel: Linux RDS Protocol Local Privilege Escalation
bugzilla·2010-10-21·CVSS 7.8
CVE-2010-3904 [HIGH] CVE-2010-3904 kernel: Linux RDS Protocol Local Privilege Escalation
CVE-2010-3904 kernel: Linux RDS Protocol Local Privilege Escalation
Description of problem:
Vulnerability Details
- ---------------------
On Linux, recvmsg() style socket calls are performed using iovec structs,
which
allow a user to specify a base address and size for a buffer used to receive
socket data. Each packet family is responsible for defining functions that
copy socket data, which is received by the kernel, back to user space to allow
user programs to process and handle received network data.
When performing this copying of data to user space, the RDS protocol failed to
verify that the base address of a user-provided iovec struct pointed to a
valid
userspace address before using the __copy_to_user_inatomic() function to copy
the data. As a result, by providing a kernel address
Bugzilla
CVE-2010-3904 kernel: Linux RDS Protocol Local Privilege Escalation
bugzilla·2010-10-21·CVSS 7.8
CVE-2010-3904 [HIGH] CVE-2010-3904 kernel: Linux RDS Protocol Local Privilege Escalation
CVE-2010-3904 kernel: Linux RDS Protocol Local Privilege Escalation
I verified this one on the currently available F-14 kernel, 2.6.35.6-45.fc14.x86_64:
nils@gibraltar:/tmp> getenforce
Enforcing
nils@gibraltar:/tmp> ./linux-rds-exploit
[*] Linux kernel >= 2.6.30 RDS socket exploit
[*] by Dan Rosenberg
[*] Resolving kernel addresses...
[+] Resolved rds_proto_ops to 0xffffffffa04c7790
[+] Resolved rds_ioctl to 0xffffffffa04c1000
[+] Resolved commit_creds to 0xffffffff8106b52c
[+] Resolved prepare_kernel_cred to 0xffffffff8106b94f
[*] Overwriting function pointer...
[*] Triggering payload...
[*] Restoring function pointer...
[*] Got root!
sh-4.1#
+++ This bug was initially created as a clone of Bug #645252 +++
Description of problem:
Vulnerability Details
- ---------------------
On Linux,
Bugzilla
CVE-2010-3904 kernel: RDS sockets local privilege escalation
bugzilla·2010-10-14·CVSS 7.8
CVE-2010-3904 [HIGH] CVE-2010-3904 kernel: RDS sockets local privilege escalation
CVE-2010-3904 kernel: RDS sockets local privilege escalation
Description of problem:
The handling functions for sending and receiving messages, in rds_page_copy_user(), use the unchecked __copy_*_user_inatomic functions without any access checks on user-provided pointers. As a result, by passing a kernel address as an iovec base address in recvmsg-style calls, a local user can overwrite arbitrary kernel memory, which can easily be used to escalate privileges to root.
Introduced via 7875e18e (v2.6.30-rc1).
Acknowledgements:
Red Hat would like to thank Dan Rosenberg of Virtual Security Research for reporting this issue.
Discussion:
Statement:
The Linux kernel as shipped with Red Hat Enterprise Linux 3, 4 and Red Hat Enterprise MRG did not include support for the RDS Protocol, and ther
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=799c10559d60f159ab2232203f222f18fa3c4a5fhttp://lists.opensuse.org/opensuse-security-announce/2010-10/msg00008.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-11/msg00004.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.htmlhttp://packetstormsecurity.com/files/155751/vReliable-Datagram-Sockets-RDS-rds_page_copy_user-Privilege-Escalation.htmlhttp://secunia.com/advisories/46397http://securitytracker.com/id?1024613http://www.kb.cert.org/vuls/id/362983http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36http://www.redhat.com/support/errata/RHSA-2010-0792.htmlhttp://www.redhat.com/support/errata/RHSA-2010-0842.htmlhttp://www.securityfocus.com/archive/1/520102/100/0/threadedhttp://www.ubuntu.com/usn/USN-1000-1http://www.vmware.com/security/advisories/VMSA-2011-0012.htmlhttp://www.vsecurity.com/download/tools/linux-rds-exploit.chttp://www.vsecurity.com/resources/advisory/20101019-1/http://www.vupen.com/english/advisories/2011/0298https://bugzilla.redhat.com/show_bug.cgi?id=642896https://www.exploit-db.com/exploits/44677/http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=799c10559d60f159ab2232203f222f18fa3c4a5fhttp://lists.opensuse.org/opensuse-security-announce/2010-10/msg00008.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-11/msg00004.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.htmlhttp://packetstormsecurity.com/files/155751/vReliable-Datagram-Sockets-RDS-rds_page_copy_user-Privilege-Escalation.htmlhttp://secunia.com/advisories/46397http://securitytracker.com/id?1024613http://www.kb.cert.org/vuls/id/362983http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36http://www.redhat.com/support/errata/RHSA-2010-0792.htmlhttp://www.redhat.com/support/errata/RHSA-2010-0842.htmlhttp://www.securityfocus.com/archive/1/520102/100/0/threadedhttp://www.ubuntu.com/usn/USN-1000-1http://www.vmware.com/security/advisories/VMSA-2011-0012.htmlhttp://www.vsecurity.com/download/tools/linux-rds-exploit.chttp://www.vsecurity.com/resources/advisory/20101019-1/http://www.vupen.com/english/advisories/2011/0298https://bugzilla.redhat.com/show_bug.cgi?id=642896https://www.exploit-db.com/exploits/44677/https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-3904
2010-12-06
Published
2023-05-12
Added to CISA KEV
Exploited in the wild