PT-2010-3124 · Linux+1 · Linux Kernel+1
Publicado
2010-05-21
·
Atualizado
2024-06-15
·
CVE-2010-1436
CVSS v2.0
4.9
Média
| Vetor | AV:L/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel version 2.6.18
Description
The issue allows local users to cause a denial of service, resulting in a kernel panic, by exploiting improper handling of the gfs2 quota struct when it occupies two separate pages. This can be achieved through certain manipulations that cause an out-of-bounds write, such as writing from an ext3 file system to a gfs2 file system.
Recommendations
For Linux kernel version 2.6.18, consider applying a patch or configuration change to properly handle the gfs2 quota struct to prevent out-of-bounds writes. As a temporary workaround, restrict access to the gfs2 file system to minimize the risk of exploitation.
Exploit
Correção
DoS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Linux Kernel
Red Hat