PT-2010-4056 · Linux+1 · Linux Kernel+1

Published 2010-09-08 · Updated 2023-02-13 · CVE-2010-2492

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.35

Description A buffer overflow issue exists in the ecryptfs uid hash macro, potentially allowing local users to gain privileges or cause a system crash. The issue is related to the eCryptfs subsystem in the Linux kernel.

Recommendations For versions prior to 2.6.35, update to version 2.6.35 or later to resolve the issue.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2010-2492

DSA-2110-1

RHSA-2010:0723

RHSA-2010_0723

RHSA-2011:0007

RHSA-2011_0007

Affected Products

Linux Kernel

Red Hat

References · 211

• https://bdu.fstec.ru/vul/2015-01047 · Security Note
• https://bdu.fstec.ru/vul/2015-01063 · Security Note
• https://bdu.fstec.ru/vul/2015-01077 · Security Note
• https://bdu.fstec.ru/vul/2015-06262 · Security Note
• https://bdu.fstec.ru/vul/2015-01033 · Security Note
• https://bdu.fstec.ru/vul/2015-05302 · Security Note
• https://bdu.fstec.ru/vul/2015-01128 · Security Note
• https://bdu.fstec.ru/vul/2015-01073 · Security Note
• https://bdu.fstec.ru/vul/2015-01130 · Security Note
• https://bdu.fstec.ru/vul/2015-01131 · Security Note
• https://linux.oracle.com/errata/ELSA-2011-0007.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06261 · Security Note
• http://redhat.com/support/errata/RHSA-2011-0007.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-01080 · Security Note
• https://bdu.fstec.ru/vul/2015-01109 · Security Note