PT-2011-1404 · Linux+2 · Linux Kernel+2

Eugene Teo + 1 · Publicado 2010-11-10 · Atualizado 2023-02-13 · CVE-2010-3448

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.34

Description The issue allows local users to cause a denial of service, resulting in a system hang, by performing a read or write operation on the video output control state. This is due to the lack of proper access restriction to the video output control state in the thinkpad acpi.c driver when the X.Org X server is used on ThinkPad devices.

Recommendations For Linux kernel versions prior to 2.6.34, update to version 2.6.34 or later to resolve the issue.

Correção

DoS

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2010-3448

DSA-2126-1

RHSA-2010:0839

RHSA-2010_0839

Produtos afetados

Linux Kernel

Red Hat

X.Org Server

Referências · 25

• https://access.redhat.com/security/cve/CVE-2010-3078 · Nota
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=565790 · Nota
• http://openwall.com/lists/oss-security/2010/09/30/1 · Correção
• https://access.redhat.com/security/cve/CVE-2010-3477 · Nota
• https://access.redhat.com/security/cve/CVE-2010-3448 · Nota
• https://bdu.fstec.ru/vul/2015-04590 · Nota de Segurança
• http://openwall.com/lists/oss-security/2010/09/30/6 · Correção
• https://bdu.fstec.ru/vul/2015-04589 · Nota de Segurança
• http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2010/09/28/1 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64580 · Nota
• https://bdu.fstec.ru/vul/2015-04609 · Nota de Segurança
• http://openwall.com/lists/oss-security/2010/09/29/7 · Correção
• https://access.redhat.com/security/cve/CVE-2010-3066 · Nota
• https://access.redhat.com/security/cve/CVE-2010-3067 · Nota