Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-4250
HistoryJan 12, 2012 - 12:00 a.m.

CVE-2010-4250

2012-01-1200:00:00
ubuntu.com
ubuntu.com
8

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

14.3%

Memory leak in the inotify_init1 function in
fs/notify/inotify/inotify_user.c in the Linux kernel before 2.6.37 allows
local users to cause a denial of service (memory consumption) via vectors
involving failed attempts to create files.

Bugs

Notes

Author Note
mdeslaur reproducer: http://lkml.org/lkml/2010/11/23/418
apw identified the introducing commit as: 825f9692fbe417b9fb529477056ba72022847038
OSVersionArchitecturePackageVersionFilename
ubuntu10.10noarchlinux< 2.6.35-27.47UNKNOWN
ubuntu10.04noarchlinux-lts-backport-maverick< 2.6.35-28.50~lucid1UNKNOWN
ubuntu10.10noarchlinux-ti-omap4< 2.6.35-903.31UNKNOWN

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

14.3%