PT-2019-6529 · Linbit · Drbd8

Published 2019-10-30 · Updated 2019-11-07 · CVE-2010-0747

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions drbd8 (affected versions not specified)

Description The issue allows local users to bypass intended restrictions for certain actions via netlink packets.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2010-0747

DSA-2015-1

Affected Products

Drbd8

References · 5

• 🔥 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=573531 · Exploit
• https://debian.org/security/2010/dsa-2015 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0747 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2010-0747 · Vendor Advisory
• https://t.me/cibsecurity/7793 · Telegram Post