Lucene search
RootSSV:19827HistoryJun 21, 2010 - 12:00 a.m.
Linux Kernel XFS实现xfs_swapext()函数本地信息泄露漏洞
2010-06-2100:00:00
Root
www.seebug.org
35
0.0004 Low
EPSS
Percentile
8.6%
BUGTRAQ ID: 40920
CVE ID: CVE-2010-2226
Linux Kernel是开放源码操作系统Linux所使用的内核。
Linux Kernel的fs/xfs/xfs_dfrag.c文件中的xfs_swapext()函数没有正确地验证访问权限，本地用户可以通过提交特制的 IOCTL请求将属于其他用户的只读文件的内容交换到自己可读的文件中，导致泄漏敏感信息。
Linux kernel 2.6.x
厂商补丁：
Linux
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
http://archives.free.net.ph/message/20100616.135735.40f53a32.en.html
Related
veracode
veracode
Information Disclosure
2020-04-10 00:46:33
cve
cve
CVE-2010-2226
2010-09-03 20:00:00
prion
prion
Arbitrary file deletion
2010-09-03 20:00:00
ubuntucve
ubuntucve
CVE-2010-2226
2010-09-03 00:00:00
nessus
nessus
Fedora 12 : kernel-2.6.32.19-163.fc12 (2010-13110)
2010-08-24 00:00:00
Scientific Linux Security Update : kernel on SL5.x i386/x86_64
2012-08-01 00:00:00
Oracle Linux 5 : kernel (ELSA-2010-0610)
2013-07-12 00:00:00
redhat
redhat
(RHSA-2010:0610) Important: kernel security and bug fix update
2010-08-10 00:00:00
(RHSA-2010:0622) Important: rhev-hypervisor security and bug fix update
2010-08-19 00:00:00
oraclelinux
oraclelinux
kernel security and bug fix update
2010-08-10 00:00:00
Oracle Linux 5.6 kernel security and bug fix update
2011-01-20 00:00:00
centos
centos
kernel security update
2010-08-11 12:16:13
openvas
openvas
Oracle: Security Advisory (ELSA-2010-0610)
2015-10-06 00:00:00
RedHat Update for kernel RHSA-2010:0610-01
2010-08-13 00:00:00
CentOS Update for kernel CESA-2010:0610 centos5 i386
2011-08-09 00:00:00
debian
debian
[SECURITY] [DSA 2094-1] New Linux 2.6.26 packages fix several issues
2010-08-20 01:48:11
osv
osv
linux-2.6 - several issues
2010-08-19 00:00:00
fedora
fedora
[SECURITY] Fedora 12 Update: kernel-2.6.32.19-163.fc12
2010-08-23 22:02:23
suse
suse
remote denial of service in kernel
2010-12-14 13:42:46
local privilege escalation in kernel
2010-09-23 16:37:26
remote denial of service, local privilege in kernel-rt
2011-02-07 11:58:56
ubuntu
ubuntu
Linux kernel vulnerabilities
2010-10-19 00:00:00
Linux kernel vulnerabilities
2011-02-28 00:00:00
Linux kernel vulnerabilities
2011-02-25 00:00:00