Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-2798
HistorySep 08, 2010 - 8:00 p.m.

CVE-2010-2798

2010-09-0820:00:02
CWE-476
[email protected]
web.nvd.nist.gov

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.3%

JSON

The gfs2_dirent_find_space function in fs/gfs2/dir.c in the Linux kernel before 2.6.35 uses an incorrect size value in calculations associated with sentinel directory entries, which allows local users to cause a denial of service (NULL pointer dereference and panic) and possibly have unspecified other impact by renaming a file in a GFS2 filesystem, related to the gfs2_rename function in fs/gfs2/ops_inode.c.

Affected configurations

NVD
Node
linuxlinux_kernelRange<2.6.35
Node
vmwareesxMatch4.0
OR
vmwareesxMatch4.1
Node
canonicalubuntu_linuxMatch6.06
OR
canonicalubuntu_linuxMatch8.04
OR
canonicalubuntu_linuxMatch9.04
OR
canonicalubuntu_linuxMatch9.10
OR
canonicalubuntu_linuxMatch10.04-
OR
canonicalubuntu_linuxMatch10.10
Node
debiandebian_linuxMatch5.0
Node
avayaaura_communication_managerMatch5.2
OR
avayaaura_presence_servicesMatch6.0
OR
avayaaura_presence_servicesMatch6.1
OR
avayaaura_presence_servicesMatch6.1.1
OR
avayaaura_session_managerMatch1.1
OR
avayaaura_session_managerMatch5.2
OR
avayaaura_session_managerMatch6.0
OR
avayaaura_system_managerMatch5.2
OR
avayaaura_system_managerMatch6.0
OR
avayaaura_system_managerMatch6.1
OR
avayaaura_system_managerMatch6.1.1
OR
avayaaura_system_platformMatch1.1
OR
avayaaura_system_platformMatch6.0-
OR
avayaaura_system_platformMatch6.0sp1
OR
avayaiqMatch5.0
OR
avayaiqMatch5.1
OR
avayavoice_portalMatch5.0
OR
avayavoice_portalMatch5.1-
OR
avayavoice_portalMatch5.1sp1
Node
opensuseopensuseMatch11.1
OR
suselinux_enterprise_high_availability_extensionMatch11-
OR
suselinux_enterprise_high_availability_extensionMatch11sp1
OR
susesuse_linux_enterprise_desktopMatch11-
OR
susesuse_linux_enterprise_desktopMatch11sp1
OR
susesuse_linux_enterprise_serverMatch11-
OR
susesuse_linux_enterprise_serverMatch11sp1

References

Related

prion 1
cve 1
ubuntucve 1
veracode 1
cvelist 1
nessus 23
redhat 3
openvas 27
suse 5
fedora 2
centos 1
osv 1
oraclelinux 1
debian 1
ubuntu 4
vmware 2
prion
prion
Null pointer dereference
2010-09-08 20:00:00
cve
cve
CVE-2010-2798
2010-09-08 20:00:02
ubuntucve
ubuntucve
CVE-2010-2798
2010-09-08 00:00:00
veracode
veracode
Privilege Escalation
2020-04-10 00:47:49
cvelist
cvelist
CVE-2010-2798
2010-09-08 19:00:00
nessus
nessus
RHEL 5 : kernel (RHSA-2010:0661)
2010-08-31 00:00:00
Oracle Linux 5 : kernel (ELSA-2010-0661)
2013-07-12 00:00:00
RHEL 5 : kernel (RHSA-2010:0660)
2013-01-24 00:00:00
redhat
redhat
(RHSA-2010:0670) Important: kernel security and bug fix update
2010-09-02 00:00:00
(RHSA-2010:0660) Important: kernel security and bug fix update
2010-08-30 00:00:00
(RHSA-2010:0723) Important: kernel security and bug fix update
2010-09-29 00:00:00
openvas
openvas
SuSE Update for kernel SUSE-SA:2010:039
2011-01-11 00:00:00
SuSE Update for kernel SUSE-SA:2010:039
2011-01-11 00:00:00
Fedora Update for kernel FEDORA-2010-13058
2010-08-30 00:00:00
suse
suse
local privilege escalation in kernel
2010-09-08 15:41:48
remote denial of service in kernel
2010-09-13 17:57:23
local privilege escalation in kernel
2010-11-03 13:13:23
fedora
fedora
[SECURITY] Fedora 13 Update: kernel-2.6.33.8-149.fc13
2010-08-23 22:09:13
[SECURITY] Fedora 12 Update: kernel-2.6.32.19-163.fc12
2010-08-23 22:02:23
centos
centos
kernel security update
2010-09-30 15:36:09
osv
osv
linux-2.6 - several issues
2010-08-19 00:00:00
oraclelinux
oraclelinux
kernel security and bug fix update
2010-09-29 00:00:00
debian
debian
[SECURITY] [DSA 2094-1] New Linux 2.6.26 packages fix several issues
2010-08-20 01:48:11
ubuntu
ubuntu
Linux kernel vulnerabilities
2010-10-19 00:00:00
Linux kernel vulnerabilities
2011-02-28 00:00:00
Linux kernel vulnerabilities
2011-02-25 00:00:00
vmware
vmware
VMware ESX third party updates for Service Console packages glibc and dhcp
2011-10-12 00:00:00
VMware ESXi and ESX updates to third party libraries and ESX Service Console
2011-10-12 00:00:00

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.3%

JSON
Related for NVD:CVE-2010-2798
prion1cve1ubuntucve1veracode1cvelist1nessus23redhat3openvas27suse5fedora2centos1osv1oraclelinux1debian1ubuntu4vmware2