PT-2010-4424 · Linux+1 · Linux Kernel+1

·

CVE-2010-2943

·

Publicado

2010-09-29

·

Atualizado

2023-02-13

CVSS v2.0

6.4

Média

VetorAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.35
Description The issue allows remote authenticated users to read unlinked files or read and overwrite disk blocks that are currently assigned to an active file but were previously assigned to an unlinked file. This is achieved by accessing a stale NFS filehandle due to the xfs implementation not looking up inode allocation btrees before reading inode buffers.
Recommendations For Linux kernel versions prior to 2.6.35, update to version 2.6.35 or later to resolve the issue.

Exploit

Correção

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2010-2943
RHSA-2010:0723
RHSA-2010_0723

Produtos afetados

Linux Kernel
Red Hat