Lucene search

[email protected]CVE-2010-2530

HistoryOct 03, 2022 - 4:21 p.m.

CVE-2010-2530

2022-10-0316:21:09

CWE-189

[email protected]

web.nvd.nist.gov

cve-2010-2530

integer signedness errors

smb_subr.c

denial of service

nvd

netbsd

freebsd

apple

mac os x

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Multiple integer signedness errors in smb_subr.c in the netsmb module in the kernel in NetBSD 5.0.2 and earlier, FreeBSD, and Apple Mac OS X allow local users to cause a denial of service (panic) via a negative size value in a /dev/nsmb ioctl operation, as demonstrated by a (1) SMBIOC_LOOKUP or (2) SMBIOC_OPENSESSION ioctl call.

Affected configurations

NVD

Node

netbsdnetbsdRange≤5.0.2

netbsdnetbsdMatch0.8

netbsdnetbsdMatch0.9

netbsdnetbsdMatch1.0

netbsdnetbsdMatch1.1

netbsdnetbsdMatch1.2

netbsdnetbsdMatch1.2.1

netbsdnetbsdMatch1.3

netbsdnetbsdMatch1.3.1

netbsdnetbsdMatch1.3.2

netbsdnetbsdMatch1.3.3

netbsdnetbsdMatch1.4

netbsdnetbsdMatch1.4.1

netbsdnetbsdMatch1.4.2

netbsdnetbsdMatch1.4.3

netbsdnetbsdMatch1.5

netbsdnetbsdMatch1.5.1

netbsdnetbsdMatch1.5.2

netbsdnetbsdMatch1.5.3

netbsdnetbsdMatch1.6

netbsdnetbsdMatch1.6beta

netbsdnetbsdMatch1.6.1

netbsdnetbsdMatch1.6.2

netbsdnetbsdMatch2.0

netbsdnetbsdMatch2.0.1

netbsdnetbsdMatch2.0.2

netbsdnetbsdMatch2.0.3

netbsdnetbsdMatch2.0.4

netbsdnetbsdMatch2.1

netbsdnetbsdMatch2.1.1

netbsdnetbsdMatch3.0

netbsdnetbsdMatch3.0.1

netbsdnetbsdMatch3.0.2

netbsdnetbsdMatch3.1

netbsdnetbsdMatch3.99.15

netbsdnetbsdMatch4.0beta

netbsdnetbsdMatch4.0beta2

netbsdnetbsdMatch4.0.1

netbsdnetbsdMatch5.0

netbsdnetbsdMatch5.0.1

Node

applemac_os_x

freebsdfreebsd

CPENameOperatorVersion
netbsd:netbsdnetbsdle5.0.2
netbsd:netbsdnetbsdeq0.8
netbsd:netbsdnetbsdeq0.9
netbsd:netbsdnetbsdeq1.0
netbsd:netbsdnetbsdeq1.1
netbsd:netbsdnetbsdeq1.2
netbsd:netbsdnetbsdeq1.2.1
netbsd:netbsdnetbsdeq1.3
netbsd:netbsdnetbsdeq1.3.1
netbsd:netbsdnetbsdeq1.3.2

CPE	Name	Operator	Version
netbsd:netbsd	netbsd	le	5.0.2
netbsd:netbsd	netbsd	eq	0.8
netbsd:netbsd	netbsd	eq	0.9
netbsd:netbsd	netbsd	eq	1.0
netbsd:netbsd	netbsd	eq	1.1
netbsd:netbsd	netbsd	eq	1.2
netbsd:netbsd	netbsd	eq	1.2.1
netbsd:netbsd	netbsd	eq	1.3
netbsd:netbsd	netbsd	eq	1.3.1
netbsd:netbsd	netbsd	eq	1.3.2

Rows per page:

1-10 of 381

References

cvsweb.netbsd.org/bsdweb.cgi/src/sys/netsmb/smb_subr.c.diff?r1=1.34&r2=1.35&only_with_tag=MAIN&f=h

www.openwall.com/lists/oss-security/2010/07/12/6

www.openwall.com/lists/oss-security/2010/07/16/2

www.securityfocus.com/bid/41557

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2010-2530

nvd1 prion1 cvelist1