PT-2010-5688 · Linux+2 · Linux Kernel+2

Eugene Teo

·

Published

1970-01-01

·

Updated

2023-02-13

·

CVE-2010-2248

CVSS v2.0

7.8

High

VectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions SUSE Linux Enterprise versions prior to 2.6.34-rc4 kernel-vmipae-debuginfo (affected versions not specified) kernel-kdumppae-debuginfo (affected versions not specified)
Description The issue is related to multiple vulnerabilities in the Linux kernel, specifically in the CIFS implementation, which can be exploited remotely to cause a denial of service, leading to disruption of protected information availability. The exploitation can be achieved through an SMB response packet with an invalid CountHigh value. This is related to the CIFSSMBWrite and CIFSSMBWrite2 functions.
Recommendations For SUSE Linux Enterprise versions prior to 2.6.34-rc4, update to version 2.6.34-rc4 or later to resolve the issue. For kernel-vmipae-debuginfo and kernel-kdumppae-debuginfo, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Information Disclosure

Weakness Enumeration

CWE-20CWE-200

Related Identifiers

BDU:2015-04589
BDU:2015-04590
CVE-2010-2248
DSA-2094-1
RHSA-2010:0606
RHSA-2010:0610
RHSA-2010:0631
RHSA-2010_0606
RHSA-2010_0610

Affected Products

Linux Kernel
Red Hat
Suse Linux Enterprise