PT-2010-3679 · Linux+1 · Linux Kernel+1

Dan Rosenberg · Publicado 2010-08-10 · Atualizado 2024-06-15 · CVE-2010-2066

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.35

Description The issue allows local users to overwrite an append-only file. This is achieved through a MOVE EXT ioctl call that specifies the append-only file as a donor, exploiting the mext check arguments function in fs/ext4/move extent.c.

Recommendations For versions prior to 2.6.35, update to version 2.6.35 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2010-2066

OPENSUSE-SU-2024:10128-1

RHSA-2010:0610

RHSA-2010_0610

Produtos afetados

Linux Kernel

Red Hat

Referências · 222

• https://suse.com/security/cve/CVE-2010-2066 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=601006 · Correção
• https://suse.com/security/cve/CVE-2016-7039 · Nota
• https://suse.com/security/cve/CVE-2016-4470 · Nota
• http://securityfocus.com/archive/1/516397/100/0/threaded · Nota
• https://bdu.fstec.ru/vul/2015-04590 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-01040 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-01056 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2010-1084 · Nota
• https://suse.com/security/cve/CVE-2010-3297 · Nota
• https://suse.com/security/cve/CVE-2010-3296 · Nota
• https://suse.com/security/cve/CVE-2013-0231 · Nota
• https://bdu.fstec.ru/vul/2015-01066 · Nota de Segurança
• https://suse.com/security/cve/CVE-2010-1641 · Nota
• https://suse.com/security/cve/CVE-2016-7042 · Nota