CVE-2010-0453
Solaris/Open Solaris UCODE_GET_VERSION IOCTL - Denial of Service
Severity Score
5.5
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
2
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The ucode_ioctl function in intel/io/ucode_drv.c in Sun Solaris 10 and OpenSolaris snv_69 through snv_133, when running on x86 architectures, allows local users to cause a denial of service (panic) via a request with a 0 size value to the UCODE_GET_VERSION IOCTL, which triggers a NULL pointer dereference in the ucode_get_rev function, related to retrieval of the microcode revision.
La función ucode_ioctl en intel/io/ucode_drv.c en Sun Solaris v10 y OpenSolaris desde snv_69 hasta snv_133, cuando es ejecutado sobre arquitecturas x86, permite a usuarios locales producir una denegación de servicio (panic) a través de una petición con un valor de tamaño 0 al IOCTL UCODE_GET_VERSION el cual inicia una desreferencia a un puntero nulo en la función ucode_get_rev, relacionado con el arreglo en la revisión de microcódigo.
The kernel of Oracle Solaris contains a vulnerability in the code that handles UCODE_GET_VERSION IOCTL requests. The vulnerability allows a local unprivileged user the ability to panic a Solaris x86 Intel-based system (32-bit/64-bit mode) due to a NULL pointer dereference. The ability to panic a system is a type of Denial of Service (DoS). The issue can be triggered by sending a specially crafted IOCTL request to the kernel.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2010-01-28 CVE Reserved
- 2010-02-02 CVE Published
- 2010-02-09 First Exploit
- 2024-08-07 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-20: Improper Input Validation
CAPEC
References (15)
| URL | Tag | Source |
|---|---|---|
| http://osvdb.org/62046 | Vdb Entry | |
| http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html | X_refsource_confirm |
|
| http://www.securityfocus.com/archive/1/509276/100/0/threaded | Mailing List | |
| http://www.securityfocus.com/bid/38016 | Vdb Entry | |
| http://www.trapkit.de/advisories/TKADV2010-001.txt | X_refsource_misc | |
| http://www.us-cert.gov/cas/techalerts/TA10-103B.html | Third Party Advisory | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/55991 | Vdb Entry | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6959 | Signature |
| URL | Date | SRC |
|---|---|---|
| https://packetstorm.news/files/id/86058 | 2010-02-09 | |
| https://www.exploit-db.com/exploits/11351 | 2010-06-28 |
| URL | Date | SRC |
|---|---|---|
| http://sunsolve.sun.com/search/document.do?assetkey=1-21-143913-01-1 | 2018-10-10 | |
| http://www.vupen.com/english/advisories/2010/0270 | 2018-10-10 |
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/38452 | 2018-10-10 | |
| http://sunsolve.sun.com/search/document.do?assetkey=1-66-275910-1 | 2018-10-10 | |
| http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021799.1-1 | 2018-10-10 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_69 Search vendor "Sun" for product "Opensolaris" and version "snv_69" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_70 Search vendor "Sun" for product "Opensolaris" and version "snv_70" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_71 Search vendor "Sun" for product "Opensolaris" and version "snv_71" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_72 Search vendor "Sun" for product "Opensolaris" and version "snv_72" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_73 Search vendor "Sun" for product "Opensolaris" and version "snv_73" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_74 Search vendor "Sun" for product "Opensolaris" and version "snv_74" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_75 Search vendor "Sun" for product "Opensolaris" and version "snv_75" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_76 Search vendor "Sun" for product "Opensolaris" and version "snv_76" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_77 Search vendor "Sun" for product "Opensolaris" and version "snv_77" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_78 Search vendor "Sun" for product "Opensolaris" and version "snv_78" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_79 Search vendor "Sun" for product "Opensolaris" and version "snv_79" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_80 Search vendor "Sun" for product "Opensolaris" and version "snv_80" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_81 Search vendor "Sun" for product "Opensolaris" and version "snv_81" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_82 Search vendor "Sun" for product "Opensolaris" and version "snv_82" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_83 Search vendor "Sun" for product "Opensolaris" and version "snv_83" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_84 Search vendor "Sun" for product "Opensolaris" and version "snv_84" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_85 Search vendor "Sun" for product "Opensolaris" and version "snv_85" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_86 Search vendor "Sun" for product "Opensolaris" and version "snv_86" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_87 Search vendor "Sun" for product "Opensolaris" and version "snv_87" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_88 Search vendor "Sun" for product "Opensolaris" and version "snv_88" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_89 Search vendor "Sun" for product "Opensolaris" and version "snv_89" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_90 Search vendor "Sun" for product "Opensolaris" and version "snv_90" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_91 Search vendor "Sun" for product "Opensolaris" and version "snv_91" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_92 Search vendor "Sun" for product "Opensolaris" and version "snv_92" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_93 Search vendor "Sun" for product "Opensolaris" and version "snv_93" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_94 Search vendor "Sun" for product "Opensolaris" and version "snv_94" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_95 Search vendor "Sun" for product "Opensolaris" and version "snv_95" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_96 Search vendor "Sun" for product "Opensolaris" and version "snv_96" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_97 Search vendor "Sun" for product "Opensolaris" and version "snv_97" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_98 Search vendor "Sun" for product "Opensolaris" and version "snv_98" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_99 Search vendor "Sun" for product "Opensolaris" and version "snv_99" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_100 Search vendor "Sun" for product "Opensolaris" and version "snv_100" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_101 Search vendor "Sun" for product "Opensolaris" and version "snv_101" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_102 Search vendor "Sun" for product "Opensolaris" and version "snv_102" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_103 Search vendor "Sun" for product "Opensolaris" and version "snv_103" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_104 Search vendor "Sun" for product "Opensolaris" and version "snv_104" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_105 Search vendor "Sun" for product "Opensolaris" and version "snv_105" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_106 Search vendor "Sun" for product "Opensolaris" and version "snv_106" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_107 Search vendor "Sun" for product "Opensolaris" and version "snv_107" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_108 Search vendor "Sun" for product "Opensolaris" and version "snv_108" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_109 Search vendor "Sun" for product "Opensolaris" and version "snv_109" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_110 Search vendor "Sun" for product "Opensolaris" and version "snv_110" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_111 Search vendor "Sun" for product "Opensolaris" and version "snv_111" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_112 Search vendor "Sun" for product "Opensolaris" and version "snv_112" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_113 Search vendor "Sun" for product "Opensolaris" and version "snv_113" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_114 Search vendor "Sun" for product "Opensolaris" and version "snv_114" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_115 Search vendor "Sun" for product "Opensolaris" and version "snv_115" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_116 Search vendor "Sun" for product "Opensolaris" and version "snv_116" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_117 Search vendor "Sun" for product "Opensolaris" and version "snv_117" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_118 Search vendor "Sun" for product "Opensolaris" and version "snv_118" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_119 Search vendor "Sun" for product "Opensolaris" and version "snv_119" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_120 Search vendor "Sun" for product "Opensolaris" and version "snv_120" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_121 Search vendor "Sun" for product "Opensolaris" and version "snv_121" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_122 Search vendor "Sun" for product "Opensolaris" and version "snv_122" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_123 Search vendor "Sun" for product "Opensolaris" and version "snv_123" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_124 Search vendor "Sun" for product "Opensolaris" and version "snv_124" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_125 Search vendor "Sun" for product "Opensolaris" and version "snv_125" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_126 Search vendor "Sun" for product "Opensolaris" and version "snv_126" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_127 Search vendor "Sun" for product "Opensolaris" and version "snv_127" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_128 Search vendor "Sun" for product "Opensolaris" and version "snv_128" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_129 Search vendor "Sun" for product "Opensolaris" and version "snv_129" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_130 Search vendor "Sun" for product "Opensolaris" and version "snv_130" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_131 Search vendor "Sun" for product "Opensolaris" and version "snv_131" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_132 Search vendor "Sun" for product "Opensolaris" and version "snv_132" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Opensolaris Search vendor "Sun" for product "Opensolaris" | snv_133 Search vendor "Sun" for product "Opensolaris" and version "snv_133" | x86 |
Affected
| ||||||
| Sun Search vendor "Sun" | Solaris Search vendor "Sun" for product "Solaris" | 10.0 Search vendor "Sun" for product "Solaris" and version "10.0" | x86 |
Affected
| ||||||