2 matches found
Design/Logic Flaw
The DNS resolution functionality in the CIFS implementation in the Linux kernel before 2.6.35, when CONFIGCIFSDFSUPCALL is enabled, relies on a user's keyring for the dnsresolver upcall in the cifs.upcall userspace helper, which allows local users to spoof the results of DNS queries and perform...
4.6CVSS6.6AI score0.00423EPSS
SaveExploits1References13Affected Software5
CVE-2010-2524: Undefined Security Weakness
The DNS resolution functionality in the CIFS implementation in the Linux kernel before 2.6.35, when CONFIGCIFSDFSUPCALL is enabled, relies on a user's keyring for the dnsresolver upcall in the cifs.upcall userspace helper, which allows local users to spoof the results of DNS queries and perform...
7.8CVSS5.9AI score0.00423EPSS
SaveExploits1References1
20