PT-2010-3303 · Linux+1 · Linux Kernel+1

Dan Rosenberg · Publicado 2010-06-01 · Atualizado 2024-06-15 · CVE-2010-1641

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.34-git10

Description The issue concerns the do gfs2 set flags function in fs/gfs2/file.c, which fails to verify file ownership. This allows local users to bypass intended access restrictions by sending a SETFLAGS ioctl request.

Recommendations For versions prior to 2.6.34-git10, update to version 2.6.34-git10 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2010-1641

OPENSUSE-SU-2024:10128-1

RHSA-2010:0504

RHSA-2010_0504

Produtos afetados

Linux Kernel

Red Hat

Referências · 238

• https://bdu.fstec.ru/vul/2015-01047 · Nota de Segurança
• https://suse.com/security/cve/CVE-2014-0196 · Nota
• https://bdu.fstec.ru/vul/2015-01063 · Nota de Segurança
• http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00000.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2010-2066 · Nota
• https://suse.com/security/cve/CVE-2011-1581 · Nota
• https://suse.com/security/cve/CVE-2013-2850 · Nota
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7df0e0397b9a18358573274db9fdab991941062f · Nota
• https://bdu.fstec.ru/vul/2015-01077 · Nota de Segurança
• http://openwall.com/lists/oss-security/2010/05/26/1 · Nota
• https://suse.com/security/cve/CVE-2016-7042 · Nota
• https://access.redhat.com/security/cve/CVE-2010-1641 · Nota
• https://suse.com/security/cve/CVE-2016-7425 · Nota
• https://bdu.fstec.ru/vul/2015-01033 · Nota de Segurança
• http://openwall.com/lists/oss-security/2010/05/25/1 · Nota