NVD Vulnerability Detail

CVE-2010-0453

Summary	The ucode_ioctl function in intel/io/ucode_drv.c in Sun Solaris 10 and OpenSolaris snv_69 through snv_133, when running on x86 architectures, allows local users to cause a denial of service (panic) via a request with a 0 size value to the UCODE_GET_VERSION IOCTL, which triggers a NULL pointer dereference in the ucode_get_rev function, related to retrieval of the microcode revision.
Publication Date	Feb. 4, 2010, 3:30 a.m.
Registration Date	Jan. 29, 2021, 10:57 a.m.
Last Update	Oct. 11, 2018, 4:52 a.m.

CVSS2.0 : MEDIUM
Score	4.9
Vector	AV:L/AC:L/Au:N/C:N/I:N/A:C
攻撃元区分(AV)	ローカル
攻撃条件の複雑さ(AC)	低
攻撃前の認証要否(Au)	不要
機密性への影響(C)	なし
完全性への影響(I)	なし
可用性への影響(A)	高
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	いいえ

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:o:sun:opensolaris:snv_69::x86:::::
cpe:2.3:o:sun:opensolaris:snv_70::x86:::::
cpe:2.3:o:sun:opensolaris:snv_71::x86:::::
cpe:2.3:o:sun:opensolaris:snv_72::x86:::::
cpe:2.3:o:sun:opensolaris:snv_73::x86:::::
cpe:2.3:o:sun:opensolaris:snv_74::x86:::::
cpe:2.3:o:sun:opensolaris:snv_75::x86:::::
cpe:2.3:o:sun:opensolaris:snv_76::x86:::::
cpe:2.3:o:sun:opensolaris:snv_77::x86:::::
cpe:2.3:o:sun:opensolaris:snv_78::x86:::::
cpe:2.3:o:sun:opensolaris:snv_79::x86:::::
cpe:2.3:o:sun:opensolaris:snv_80::x86:::::
cpe:2.3:o:sun:opensolaris:snv_81::x86:::::
cpe:2.3:o:sun:opensolaris:snv_82::x86:::::
cpe:2.3:o:sun:opensolaris:snv_83::x86:::::
cpe:2.3:o:sun:opensolaris:snv_84::x86:::::
cpe:2.3:o:sun:opensolaris:snv_85::x86:::::
cpe:2.3:o:sun:opensolaris:snv_86::x86:::::
cpe:2.3:o:sun:opensolaris:snv_87::x86:::::
cpe:2.3:o:sun:opensolaris:snv_88::x86:::::
cpe:2.3:o:sun:opensolaris:snv_89::x86:::::
cpe:2.3:o:sun:opensolaris:snv_90::x86:::::
cpe:2.3:o:sun:opensolaris:snv_91::x86:::::
cpe:2.3:o:sun:opensolaris:snv_92::x86:::::
cpe:2.3:o:sun:opensolaris:snv_93::x86:::::
cpe:2.3:o:sun:opensolaris:snv_94::x86:::::
cpe:2.3:o:sun:opensolaris:snv_95::x86:::::
cpe:2.3:o:sun:opensolaris:snv_96::x86:::::
cpe:2.3:o:sun:opensolaris:snv_97::x86:::::
cpe:2.3:o:sun:opensolaris:snv_98::x86:::::
cpe:2.3:o:sun:opensolaris:snv_99::x86:::::
cpe:2.3:o:sun:opensolaris:snv_100::x86:::::
cpe:2.3:o:sun:opensolaris:snv_101::x86:::::
cpe:2.3:o:sun:opensolaris:snv_102::x86:::::
cpe:2.3:o:sun:opensolaris:snv_103::x86:::::
cpe:2.3:o:sun:opensolaris:snv_104::x86:::::
cpe:2.3:o:sun:opensolaris:snv_105::x86:::::
cpe:2.3:o:sun:opensolaris:snv_106::x86:::::
cpe:2.3:o:sun:opensolaris:snv_107::x86:::::
cpe:2.3:o:sun:opensolaris:snv_108::x86:::::
cpe:2.3:o:sun:opensolaris:snv_109::x86:::::
cpe:2.3:o:sun:opensolaris:snv_110::x86:::::
cpe:2.3:o:sun:opensolaris:snv_111::x86:::::
cpe:2.3:o:sun:opensolaris:snv_112::x86:::::
cpe:2.3:o:sun:opensolaris:snv_113::x86:::::
cpe:2.3:o:sun:opensolaris:snv_114::x86:::::
cpe:2.3:o:sun:opensolaris:snv_115::x86:::::
cpe:2.3:o:sun:opensolaris:snv_116::x86:::::
cpe:2.3:o:sun:opensolaris:snv_117::x86:::::
cpe:2.3:o:sun:opensolaris:snv_118::x86:::::
cpe:2.3:o:sun:opensolaris:snv_119::x86:::::
cpe:2.3:o:sun:opensolaris:snv_120::x86:::::
cpe:2.3:o:sun:opensolaris:snv_121::x86:::::
cpe:2.3:o:sun:opensolaris:snv_122::x86:::::
cpe:2.3:o:sun:opensolaris:snv_123::x86:::::
cpe:2.3:o:sun:opensolaris:snv_124::x86:::::
cpe:2.3:o:sun:opensolaris:snv_125::x86:::::
cpe:2.3:o:sun:opensolaris:snv_126::x86:::::
cpe:2.3:o:sun:opensolaris:snv_127::x86:::::
cpe:2.3:o:sun:opensolaris:snv_128::x86:::::
cpe:2.3:o:sun:opensolaris:snv_129::x86:::::
cpe:2.3:o:sun:opensolaris:snv_130::x86:::::
cpe:2.3:o:sun:opensolaris:snv_131::x86:::::
cpe:2.3:o:sun:opensolaris:snv_132::x86:::::
cpe:2.3:o:sun:opensolaris:snv_133::x86:::::
cpe:2.3:o:sun:solaris:10.0::x86:::::

Related information, measures and tools

No	URL	refsource	タグ
1	http://osvdb.org/62046	OSVDB
2	http://secunia.com/advisories/38452	SECUNIA	Vendor Advisory
3	http://sunsolve.sun.com/search/document.do?assetkey=1-21-143913-01-1	CONFIRM	Patch
4	http://sunsolve.sun.com/search/document.do?assetkey=1-66-275910-1	SUNALERT
5	http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021799.1-1	SUNALERT
6	http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html	CONFIRM
7	http://www.securityfocus.com/archive/1/509276/100/0/threaded	BUGTRAQ
8	http://www.securityfocus.com/bid/38016	BID
9	http://www.trapkit.de/advisories/TKADV2010-001.txt	MISC
10	http://www.us-cert.gov/cas/techalerts/TA10-103B.html	CERT	US Government Resource
11	http://www.vupen.com/english/advisories/2010/0270	VUPEN	Patch Vendor Advisory
12	https://exchange.xforce.ibmcloud.com/vulnerabilities/55991	XF
13	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6959	OVAL

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-20	不適切な入力確認	https://cwe.mitre.org/data/definitions/20.html

JVN Vulnerability Information

Oracle Sun Product Suite の Solaris コンポーネントにおける脆弱性

Title	Oracle Sun Product Suite の Solaris コンポーネントにおける脆弱性
Summary	Oracle Sun Product Suite の Solaris コンポーネントには、可用性に影響のある脆弱性が存在します。
Possible impacts	ローカルユーザにより、サービス運用妨害 (DoS) 攻撃が行われる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Feb. 3, 2010, midnight
Registration Date	May 14, 2010, 6:42 p.m.
Last Update	May 14, 2010, 6:42 p.m.

Affected System

サン・マイクロシステムズ

OpenSolaris (x86)

Sun Solaris 10 (x86)

オラクル

Oracle Sun Product Suite

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2010-0453	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0453
National Vulnerability Database (NVD)
2	CVE-2010-0453	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-0453

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-20	https://jvndb.jvn.jp/ja/cwe/CWE-20.html

ベンダー情報

No	Name	URL
Critical Patch Updates and Security Alerts
1	cpuapr2010	http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuapr2010.html
Sun Microsystems
2	275910	http://sunsolve.sun.com/search/document.do?assetkey=1-66-275910-1
オラクル・セキュリティ・アラート
3	100416_90	http://www.oracle.com/technology/global/jp/security/100416_90/top.html
富士通セキュリティ情報
4	TA10-103B	http://software.fujitsu.com/jp/security/vulnerabilities/ta10-103b.html

その他

No	Name	URL
ISS X-Force Database
1	55991	http://xforce.iss.net/xforce/xfdb/55991
JVN
2	JVNTA10-103B	http://jvn.jp/cert/JVNTA10-103B/
JVN Status Tracking Notes
3	JVNTR-2010-12	http://jvn.jp/tr/JVNTR-2010-12/
OPEN SOURCE VULNERABILITY DATABASE (OSVDB)
4	62046	http://osvdb.org/62046
Secunia Advisory
5	SA38452	http://secunia.com/advisories/38452
SecurityFocus
6	38016	http://www.securityfocus.com/bid/38016
US-CERT Technical Cyber Security Alert
7	TA10-103B	http://www.us-cert.gov/cas/techalerts/TA10-103B.html
VUPEN Security
8	VUPEN/ADV-2010-0270	http://www.vupen.com/english/advisories/2010/0270

Change Log

No	Changed Details	Date of change
0	[2010年05月14日] 掲載	Feb. 17, 2018, 10:37 a.m.

Configuration1	or higher	or less	more than	less than
cpe:2.3:o:sun:opensolaris:snv_69::x86:::::
cpe:2.3:o:sun:opensolaris:snv_70::x86:::::
cpe:2.3:o:sun:opensolaris:snv_71::x86:::::
cpe:2.3:o:sun:opensolaris:snv_72::x86:::::
cpe:2.3:o:sun:opensolaris:snv_73::x86:::::
cpe:2.3:o:sun:opensolaris:snv_74::x86:::::
cpe:2.3:o:sun:opensolaris:snv_75::x86:::::
cpe:2.3:o:sun:opensolaris:snv_76::x86:::::
cpe:2.3:o:sun:opensolaris:snv_77::x86:::::
cpe:2.3:o:sun:opensolaris:snv_78::x86:::::
cpe:2.3:o:sun:opensolaris:snv_79::x86:::::
cpe:2.3:o:sun:opensolaris:snv_80::x86:::::
cpe:2.3:o:sun:opensolaris:snv_81::x86:::::
cpe:2.3:o:sun:opensolaris:snv_82::x86:::::
cpe:2.3:o:sun:opensolaris:snv_83::x86:::::
cpe:2.3:o:sun:opensolaris:snv_84::x86:::::
cpe:2.3:o:sun:opensolaris:snv_85::x86:::::
cpe:2.3:o:sun:opensolaris:snv_86::x86:::::
cpe:2.3:o:sun:opensolaris:snv_87::x86:::::
cpe:2.3:o:sun:opensolaris:snv_88::x86:::::
cpe:2.3:o:sun:opensolaris:snv_89::x86:::::
cpe:2.3:o:sun:opensolaris:snv_90::x86:::::
cpe:2.3:o:sun:opensolaris:snv_91::x86:::::
cpe:2.3:o:sun:opensolaris:snv_92::x86:::::
cpe:2.3:o:sun:opensolaris:snv_93::x86:::::
cpe:2.3:o:sun:opensolaris:snv_94::x86:::::
cpe:2.3:o:sun:opensolaris:snv_95::x86:::::
cpe:2.3:o:sun:opensolaris:snv_96::x86:::::
cpe:2.3:o:sun:opensolaris:snv_97::x86:::::
cpe:2.3:o:sun:opensolaris:snv_98::x86:::::
cpe:2.3:o:sun:opensolaris:snv_99::x86:::::
cpe:2.3:o:sun:opensolaris:snv_100::x86:::::
cpe:2.3:o:sun:opensolaris:snv_101::x86:::::
cpe:2.3:o:sun:opensolaris:snv_102::x86:::::
cpe:2.3:o:sun:opensolaris:snv_103::x86:::::
cpe:2.3:o:sun:opensolaris:snv_104::x86:::::
cpe:2.3:o:sun:opensolaris:snv_105::x86:::::
cpe:2.3:o:sun:opensolaris:snv_106::x86:::::
cpe:2.3:o:sun:opensolaris:snv_107::x86:::::
cpe:2.3:o:sun:opensolaris:snv_108::x86:::::
cpe:2.3:o:sun:opensolaris:snv_109::x86:::::
cpe:2.3:o:sun:opensolaris:snv_110::x86:::::
cpe:2.3:o:sun:opensolaris:snv_111::x86:::::
cpe:2.3:o:sun:opensolaris:snv_112::x86:::::
cpe:2.3:o:sun:opensolaris:snv_113::x86:::::
cpe:2.3:o:sun:opensolaris:snv_114::x86:::::
cpe:2.3:o:sun:opensolaris:snv_115::x86:::::
cpe:2.3:o:sun:opensolaris:snv_116::x86:::::
cpe:2.3:o:sun:opensolaris:snv_117::x86:::::
cpe:2.3:o:sun:opensolaris:snv_118::x86:::::
cpe:2.3:o:sun:opensolaris:snv_119::x86:::::
cpe:2.3:o:sun:opensolaris:snv_120::x86:::::
cpe:2.3:o:sun:opensolaris:snv_121::x86:::::
cpe:2.3:o:sun:opensolaris:snv_122::x86:::::
cpe:2.3:o:sun:opensolaris:snv_123::x86:::::
cpe:2.3:o:sun:opensolaris:snv_124::x86:::::
cpe:2.3:o:sun:opensolaris:snv_125::x86:::::
cpe:2.3:o:sun:opensolaris:snv_126::x86:::::
cpe:2.3:o:sun:opensolaris:snv_127::x86:::::
cpe:2.3:o:sun:opensolaris:snv_128::x86:::::
cpe:2.3:o:sun:opensolaris:snv_129::x86:::::
cpe:2.3:o:sun:opensolaris:snv_130::x86:::::
cpe:2.3:o:sun:opensolaris:snv_131::x86:::::
cpe:2.3:o:sun:opensolaris:snv_132::x86:::::
cpe:2.3:o:sun:opensolaris:snv_133::x86:::::
cpe:2.3:o:sun:solaris:10.0::x86:::::