PT-2010-3298 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 2.6.29 through 2.6.32 Description: The issue arises from the btrfs ioctl clone function in fs/btrfs/ioctl.c, which does not verify if a cloned file descriptor is opened for reading. This oversight allows local users to...

linux kernel 2.6. x-Btrfs for creating unsafe clone file vulnerability-vulnerability warning-the black bar safety net

Affected version: Linux kernel 2.6. x Vulnerability description: The Linux Kernel is open sourceOSLinux the kernel. Linux Kernel Btrfs implementation in btrfsioctlclone to ioctl will be provided by the user, the source file descriptor is copied to the target file descriptor, but in the...

Linux kernel 2.6.x Btrfs实现创建不安全克隆文件漏洞

BUGTRAQ ID: 40241 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的Btrfs实现中btrfsioctlclone ioctl将用户所提供的源文件描述符拷贝到了目标文件描述符，但在执行拷贝操作之前没有检查源文件描述符是否已被打开读取，这允许攻击者无需拥有读权限便可读取克隆的文件。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Linux Kernel 2.6.x - Btrfs Cloned File Security Bypass

/ source: https://www.securityfocus.com/bid/40241/info The Linux Kernel is prone to a security-bypass vulnerability that affects the Btrfs filesystem implementation. An attacker can exploit this issue to clone a file only open for writing. This may allow attackers to obtain sensitive data or laun...

Linux Kernel 2.6.x - Btrfs Cloned File Security Bypass

Linux Kernel 2.6.x - Btrfs Cloned File Security Bypass / source: https://www.securityfocus.com/bid/40241/info The Linux Kernel is prone to a security-bypass vulnerability that affects the Btrfs filesystem implementation. An attacker can exploit this issue to clone a file only open for writing. Th...

PT-2010-5668 · Suse +1 · Suse Linux Enterprise +4

Name of the Vulnerable Software and Affected Versions: SUSE Linux Enterprise versions prior to the fixed version btrfs-kmp-xen versions affected versions not specified btrfs-kmp-pae versions affected versions not specified kernel-desktop-devel versions affected versions not specified Description:...

PT-2010-5666 · Suse +2 · Suse Linux Enterprise +5

Name of the Vulnerable Software and Affected Versions: SUSE Linux Enterprise versions prior to 2.6.39.4 btrfs-kmp-xen affected versions not specified btrfs-kmp-pae affected versions not specified kernel-desktop-devel affected versions not specified Description: The issue allows local users to...

PT-2010-5669 · Suse +2 · Suse Linux Enterprise Kernel-Desktop-Devel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.1 SUSE Linux Enterprise kernel-desktop-devel affected versions not specified SUSE Linux Enterprise btrfs-kmp-xen affected versions not specified SUSE Linux Enterprise btrfs-kmp-pae affected versions not...

PT-2010-5665 · Suse +2 · Suse Linux Enterprise +5

Name of the Vulnerable Software and Affected Versions: SUSE Linux Enterprise versions prior to 2.6.39 btrfs-kmp-xen affected versions not specified btrfs-kmp-pae affected versions not specified kernel-desktop-devel affected versions not specified Description: The issue concerns multiple...