Linux kernel 2.6.x Btrfs实现创建不安全克隆文件漏洞

BUGTRAQ ID: 40241 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的Btrfs实现中btrfsioctlclone ioctl将用户所提供的源文件描述符拷贝到了目标文件描述符，但在执行拷贝操作之前没有检查源文件描述符是否已被打开读取，这允许攻击者无需拥有读权限便可读取克隆的文件。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Linux Kernel 2.6.x - Btrfs Cloned File Security Bypass

/ source: https://www.securityfocus.com/bid/40241/info The Linux Kernel is prone to a security-bypass vulnerability that affects the Btrfs filesystem implementation. An attacker can exploit this issue to clone a file only open for writing. This may allow attackers to obtain sensitive data or laun...

Linux Kernel 2.6.x - Btrfs Cloned File Security Bypass

Linux Kernel 2.6.x - Btrfs Cloned File Security Bypass / source: https://www.securityfocus.com/bid/40241/info The Linux Kernel is prone to a security-bypass vulnerability that affects the Btrfs filesystem implementation. An attacker can exploit this issue to clone a file only open for writing. Th...

PT-2010-5666 · Suse +2 · Suse Linux Enterprise +5

Name of the Vulnerable Software and Affected Versions: SUSE Linux Enterprise versions prior to 2.6.39.4 btrfs-kmp-xen affected versions not specified btrfs-kmp-pae affected versions not specified kernel-desktop-devel affected versions not specified Description: The issue allows local users to...

PT-2010-5668 · Suse +1 · Suse Linux Enterprise +4

Name of the Vulnerable Software and Affected Versions: SUSE Linux Enterprise versions prior to the fixed version btrfs-kmp-xen versions affected versions not specified btrfs-kmp-pae versions affected versions not specified kernel-desktop-devel versions affected versions not specified Description:...

PT-2010-5669 · Suse +2 · Suse Linux Enterprise Kernel-Desktop-Devel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.1 SUSE Linux Enterprise kernel-desktop-devel affected versions not specified SUSE Linux Enterprise btrfs-kmp-xen affected versions not specified SUSE Linux Enterprise btrfs-kmp-pae affected versions not...

PT-2010-5665 · Suse +2 · Suse Linux Enterprise +5

Name of the Vulnerable Software and Affected Versions: SUSE Linux Enterprise versions prior to 2.6.39 btrfs-kmp-xen affected versions not specified btrfs-kmp-pae affected versions not specified kernel-desktop-devel affected versions not specified Description: The issue concerns multiple...