Vulnerability Name:

CVE-2010-0453 (CCN-55991)

Assigned:2010-01-29
Published:2010-01-29
Updated:2018-10-10
Summary:The ucode_ioctl function in intel/io/ucode_drv.c in Sun Solaris 10 and OpenSolaris snv_69 through snv_133, when running on x86 architectures, allows local users to cause a denial of service (panic) via a request with a 0 size value to the UCODE_GET_VERSION IOCTL, which triggers a NULL pointer dereference in the ucode_get_rev function, related to retrieval of the microcode revision.
CVSS v3 Severity:6.2 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
CVSS v2 Severity:4.9 Medium (CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C)
4.1 Medium (Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C/E:F/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
4.9 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C)
4.1 Medium (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C/E:F/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
Vulnerability Type:CWE-20
Vulnerability Consequences:Denial of Service
References:Source: MITRE
Type: CNA
CVE-2010-0453

Source: OSVDB
Type: UNKNOWN
62046

Source: CCN
Type: SA38452
Solaris Microcode Device Denial of Service Vulnerability

Source: SECUNIA
Type: Vendor Advisory
38452

Source: CCN
Type: Sun Alert ID: 143913-01
SunOS 5.10_x86: ucode driver patch

Source: CONFIRM
Type: Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-21-143913-01-1

Source: SUNALERT
Type: UNKNOWN
275910

Source: SUNALERT
Type: UNKNOWN
1021799

Source: CCN
Type: TKADV2010-001
Oracle Solaris UCODE_GET_VERSION IOCTL Kernel NULL Pointer Dereference

Source: CCN
Type: Oracle Critical Patch Update Advisory - April 2010
Oracle Critical Patch Update Advisory - April 2010

Source: CONFIRM
Type: UNKNOWN
http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html

Source: CCN
Type: OSVDB ID: 62046
Solaris Microcode Device UCODE_GET_VERSION IOCTL NULL Dereference Local DoS

Source: BUGTRAQ
Type: UNKNOWN
20100131 [TKADV2010-001] Oracle Solaris UCODE_GET_VERSION IOCTL Kernel NULL Pointer Dereference

Source: BID
Type: UNKNOWN
38016

Source: CCN
Type: BID-38016
Sun Solaris 'CODE_GET_VERSION IOCTL' Local Denial Of Service Vulnerability

Source: CCN
Type: BID-39333
RETIRED: Oracle April 2010 Critical Patch Update Multiple Vulnerabilities

Source: MISC
Type: UNKNOWN
http://www.trapkit.de/advisories/TKADV2010-001.txt

Source: CERT
Type: US Government Resource
TA10-103B

Source: VUPEN
Type: Patch, Vendor Advisory
ADV-2010-0270

Source: XF
Type: UNKNOWN
solaris-microcode-dos(55991)

Source: XF
Type: UNKNOWN
solaris-microcode-dos(55991)

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:6959

Vulnerable Configuration:Configuration 1:
  • cpe:/o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_117:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_118:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_119:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_120:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_121:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_122:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_123:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_124:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_125:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_126:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_127:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_128:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_129:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_130:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_131:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_132:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_133:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:solaris:10.0:*:x86:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/o:sun:solaris:10::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_89::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_95::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_88::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_69::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_72::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_75::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_76::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_78::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_81::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_82::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_84::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_85::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_87::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_86::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_70::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_71::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_73::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_74::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_77::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_79::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_83::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_100::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_102::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_80::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_91::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_90::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_104::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_101::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_105::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_92::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_94::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_93::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_99::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_97::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_98::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_96::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_103::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_106::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_107::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_108::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_109::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_110::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_111::x86:*:*:*:*:*
  • OR cpe:/o:sun:solaris:10.0::x86:*:*:*:*:*
  • OR cpe:/a:oracle:sun_product_suite:6.0:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.mitre.oval:def:6959
    V
    		Solaris and OpenSolaris Products /dev/ucode Component Vulnerability
    2010-06-07
    BACK
    sun opensolaris snv_69
    sun opensolaris snv_70
    sun opensolaris snv_71
    sun opensolaris snv_72
    sun opensolaris snv_73
    sun opensolaris snv_74
    sun opensolaris snv_75
    sun opensolaris snv_76
    sun opensolaris snv_77
    sun opensolaris snv_78
    sun opensolaris snv_79
    sun opensolaris snv_80
    sun opensolaris snv_81
    sun opensolaris snv_82
    sun opensolaris snv_83
    sun opensolaris snv_84
    sun opensolaris snv_85
    sun opensolaris snv_86
    sun opensolaris snv_87
    sun opensolaris snv_88
    sun opensolaris snv_89
    sun opensolaris snv_90
    sun opensolaris snv_91
    sun opensolaris snv_92
    sun opensolaris snv_93
    sun opensolaris snv_94
    sun opensolaris snv_95
    sun opensolaris snv_96
    sun opensolaris snv_97
    sun opensolaris snv_98
    sun opensolaris snv_99
    sun opensolaris snv_100
    sun opensolaris snv_101
    sun opensolaris snv_102
    sun opensolaris snv_103
    sun opensolaris snv_104
    sun opensolaris snv_105
    sun opensolaris snv_106
    sun opensolaris snv_107
    sun opensolaris snv_108
    sun opensolaris snv_109
    sun opensolaris snv_110
    sun opensolaris snv_111
    sun opensolaris snv_112
    sun opensolaris snv_113
    sun opensolaris snv_114
    sun opensolaris snv_115
    sun opensolaris snv_116
    sun opensolaris snv_117
    sun opensolaris snv_118
    sun opensolaris snv_119
    sun opensolaris snv_120
    sun opensolaris snv_121
    sun opensolaris snv_122
    sun opensolaris snv_123
    sun opensolaris snv_124
    sun opensolaris snv_125
    sun opensolaris snv_126
    sun opensolaris snv_127
    sun opensolaris snv_128
    sun opensolaris snv_129
    sun opensolaris snv_130
    sun opensolaris snv_131
    sun opensolaris snv_132
    sun opensolaris snv_133
    sun solaris 10.0
    sun solaris 10
    sun opensolaris build_snv_89
    sun opensolaris build_snv_95
    sun opensolaris build_snv_88
    sun opensolaris build_snv_69
    sun opensolaris build_snv_72
    sun opensolaris build_snv_75
    sun opensolaris build_snv_76
    sun opensolaris build_snv_78
    sun opensolaris build_snv_81
    sun opensolaris build_snv_82
    sun opensolaris build_snv_84
    sun opensolaris build_snv_85
    sun opensolaris build_snv_87
    sun opensolaris build_snv_86
    sun opensolaris build_snv_70
    sun opensolaris build_snv_71
    sun opensolaris build_snv_73
    sun opensolaris build_snv_74
    sun opensolaris build_snv_77
    sun opensolaris build_snv_79
    sun opensolaris build_snv_83
    sun opensolaris build_snv_100
    sun opensolaris build_snv_102
    sun opensolaris build_snv_80
    sun opensolaris build_snv_91
    sun opensolaris build_snv_90
    sun opensolaris build_snv_104
    sun opensolaris build_snv_101
    sun opensolaris build_snv_105
    sun opensolaris build_snv_92
    sun opensolaris build_snv_94
    sun opensolaris build_snv_93
    sun opensolaris build_snv_99
    sun opensolaris build_snv_97
    sun opensolaris build_snv_98
    sun opensolaris build_snv_96
    sun opensolaris build_snv_103
    sun opensolaris build_snv_106
    sun opensolaris build_snv_107
    sun opensolaris build_snv_108
    sun opensolaris build_snv_109
    sun opensolaris build_snv_110
    sun opensolaris build_snv_111
    sun solaris 10.0
    oracle sun product suite 6.0