CVE-2010-2226

Опубликовано: 03 сент. 2010

Источник: nvd

CVSS2: 2.1

EPSS Низкий

Описание

The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux kernel before 2.6.35 does not properly check the file descriptors passed to the SWAPEXT ioctl, which allows local users to leverage write access and obtain read access by swapping one file into another file.

Ссылки

http://archives.free.net.ph/message/20100616.130710.301704aa.en.html
Broken Link
http://archives.free.net.ph/message/20100616.135735.40f53a32.en.html
Broken Link
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1817176a86352f65210139d4c794ad2d19fc6b63
http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html
Mailing List
Third Party Advisory
http://marc.info/?l=oss-security&m=127677135609357&w=2
Third Party Advisory
http://marc.info/?l=oss-security&m=127687486331790&w=2
Third Party Advisory
http://secunia.com/advisories/43315
Third Party Advisory
http://www.debian.org/security/2010/dsa-2094
Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35
Broken Link
http://www.mandriva.com/security/advisories?name=MDVSA-2010:198
Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2010-0610.html
Third Party Advisory
http://www.securityfocus.com/archive/1/516397/100/0/threaded
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/40920
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-1000-1
Third Party Advisory
http://www.vmware.com/security/advisories/VMSA-2011-0003.html
Third Party Advisory
http://www.vupen.com/english/advisories/2011/0298
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=605158
Issue Tracking
Third Party Advisory
http://archives.free.net.ph/message/20100616.130710.301704aa.en.html
Broken Link
http://archives.free.net.ph/message/20100616.135735.40f53a32.en.html
Broken Link

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 2.6.35 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:suse:linux_enterprise_desktop:10:sp3:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp3:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*

EPSS

Процентиль: 24%

0.00079

Низкий

2.1 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2010-2226

ubuntu

почти 15 лет назад

CVE-2010-2226

redhat

около 15 лет назад

CVE-2010-2226

debian

почти 15 лет назад

The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux kernel bef ...

GHSA-2fg3-h938-jr6f

github

около 3 лет назад

ELSA-2010-0610

oracle-oval

почти 15 лет назад

ELSA-2010-0610: kernel security and bug fix update (IMPORTANT)

EPSS

Процентиль: 24%

0.00079

Низкий

2.1 Low

CVSS2

Дефекты

CWE-200