CVE-2010-3448
5.7 Medium
AI Score
Confidence
High
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
0.0004 Low
EPSS
Percentile
5.3%
drivers/platform/x86/thinkpad_acpi.c in the Linux kernel before 2.6.34 on ThinkPad devices, when the X.Org X server is used, does not properly restrict access to the video output control state, which allows local users to cause a denial of service (system hang) via a (1) read or (2) write operation.
| CPE | Name | Operator | Version |
|---|---|---|---|
| linux:linux_kernel | linux linux kernel | lt | 2.6.34 |
References
bugs.debian.org/cgi-bin/bugreport.cgi?bug=565790
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b525c06cdbd8a3963f0173ccd23f9147d4c384b5
openwall.com/lists/oss-security/2010/06/23/2
openwall.com/lists/oss-security/2010/09/28/1
openwall.com/lists/oss-security/2010/09/29/7
openwall.com/lists/oss-security/2010/09/30/1
openwall.com/lists/oss-security/2010/09/30/6
www.debian.org/security/2010/dsa-2126
www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34
bugzilla.redhat.com/show_bug.cgi?id=652122
exchange.xforce.ibmcloud.com/vulnerabilities/64580
Social References
More
Related
5.7 Medium
AI Score
Confidence
High
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
0.0004 Low
EPSS
Percentile
5.3%