PT-2011-1616 · Linux+2 · Linux Kernel+2
Eugene Teo
·
Publicado
2011-02-18
·
Atualizado
2023-02-13
·
CVE-2010-4649
CVSS v2.0
6.9
Média
| Vetor | AV:L/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 2.6.37
Description
The issue is related to an integer overflow in the
ib uverbs poll cq function, which can cause a denial of service due to memory corruption. It may also have unspecified other impacts. This is achieved by providing a large value of a certain structure member.Recommendations
For Linux kernel versions prior to 2.6.37, update to version 2.6.37 or later to resolve the issue. As a temporary workaround, consider restricting access to the
ib uverbs poll cq function to minimize the risk of exploitation.Correção
DoS
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Linux Kernel
Red Hat
Suse