PT-2010-5690 · Linux+2 · Linux Kernel+2
Tavis Ormandy
·
Publicado
1970-01-01
·
Atualizado
2023-02-13
·
CVE-2010-3086
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
SUSE Linux Enterprise (affected versions not specified)
Linux kernel versions prior to 2.6.25
Description
The issue involves multiple vulnerabilities in the Linux kernel that can lead to a denial of service, causing disruption to the availability of protected information. These vulnerabilities can be exploited remotely. Additionally, there is an issue with the implementation of exception fixup in the
include/asm-x86/futex.h file of the Linux kernel, which allows local users to cause a denial of service via an invalid application that triggers a page fault.Recommendations
For Linux kernel versions prior to 2.6.25, update to version 2.6.25 or later to resolve the issue.
At the moment, there is no information about a newer version of SUSE Linux Enterprise that contains a fix for this vulnerability.
Exploit
Correção
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Linux Kernel
Red Hat
Suse Linux Enterprise