Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-4668
HistoryJan 03, 2011 - 12:00 a.m.

CVE-2010-4668

2011-01-0300:00:00
ubuntu.com
ubuntu.com
32

CVSS2

4.7

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

EPSS

0

Percentile

10.1%

The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel
before 2.6.37-rc7 allows local users to cause a denial of service (panic)
via a zero-length I/O request in a device ioctl to a SCSI device, related
to an unaligned map. NOTE: this vulnerability exists because of an
incomplete fix for CVE-2010-4163.

Rows per page:
1-10 of 121

CVSS2

4.7

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

EPSS

0

Percentile

10.1%