PT-2011-1623 · Linux+1 · Linux Kernel+1

Xiaotian Feng · Publicado 2011-01-03 · Atualizado 2020-08-12 · CVE-2010-4668

Positive Technologies (AI Summary)

CVSS v2.0

4.7

Média

Vetor base

AV:L/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.37-rc7

Description The issue allows local users to cause a denial of service, resulting in a system panic. This can be achieved by sending a zero-length I/O request in a device ioctl to a SCSI device, which is related to an unaligned map.

Recommendations For Linux kernel versions prior to 2.6.37-rc7, update to version 2.6.37-rc7 or later to resolve the issue.

Correção

DoS

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

CVE-2010-4668

DSA-2153-1

RHSA-2011:0007

RHSA-2011:0330

RHSA-2011_0007

Produtos afetados

Linux Kernel

Red Hat

Referências · 87

• https://linux.oracle.com/errata/ELSA-2011-2010.html · Aviso do Fabricante
• http://marc.info/?l=linux-netdev&m=129059035929046&w=2 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=660188 · Nota
• https://access.redhat.com/security/cve/CVE-2010-3067 · Nota
• http://securityfocus.com/archive/1/514705 · Nota
• https://access.redhat.com/security/cve/CVE-2010-4075 · Nota
• http://exploit-db.com/exploits/15622 · Nota
• http://openwall.com/lists/oss-security/2010/11/24/2 · Nota
• http://secunia.com/advisories/42890 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2010-3876 · Nota
• https://bdu.fstec.ru/vul/2015-06262 · Nota de Segurança
• http://openwall.com/lists/oss-security/2010/11/24/10 · Nota
• https://access.redhat.com/security/cve/CVE-2010-4082 · Nota
• https://bdu.fstec.ru/vul/2015-05302 · Nota de Segurança
• https://access.redhat.com/errata/RHSA-2011:0007 · Nota