1.9

CVE-2010-1446

arch/powerpc/mm/fsl_booke_mmu.c in KGDB in the Linux kernel 2.6.30 and other versions before 2.6.33, when running on PowerPC, does not properly perform a security check for access to a kernel page, which allows local users to overwrite arbitrary kernel memory, related to Fsl booke.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version2.6.30
Linux ≫ Linux Kernel Version2.6.30.1
Linux ≫ Linux Kernel Version2.6.30.2
Linux ≫ Linux Kernel Version2.6.30.3
Linux ≫ Linux Kernel Version2.6.30.4
Linux ≫ Linux Kernel Version2.6.30.5
Linux ≫ Linux Kernel Version2.6.30.6
Linux ≫ Linux Kernel Version2.6.30.7
Linux ≫ Linux Kernel Version2.6.30.8
Linux ≫ Linux Kernel Version2.6.30.9
Linux ≫ Linux Kernel Version2.6.30.10
Linux ≫ Linux Kernel Version2.6.31
Linux ≫ Linux Kernel Version2.6.31.1
Linux ≫ Linux Kernel Version2.6.31.2
Linux ≫ Linux Kernel Version2.6.31.3
Linux ≫ Linux Kernel Version2.6.31.4
Linux ≫ Linux Kernel Version2.6.31.5
Linux ≫ Linux Kernel Version2.6.31.6
Linux ≫ Linux Kernel Version2.6.31.7
Linux ≫ Linux Kernel Version2.6.31.8
Linux ≫ Linux Kernel Version2.6.31.9
Linux ≫ Linux Kernel Version2.6.31.10
Linux ≫ Linux Kernel Version2.6.31.11
Linux ≫ Linux Kernel Version2.6.31.12
Linux ≫ Linux Kernel Version2.6.31.13
Linux ≫ Linux Kernel Version2.6.32
Linux ≫ Linux Kernel Version2.6.32.1
Linux ≫ Linux Kernel Version2.6.32.2
Linux ≫ Linux Kernel Version2.6.32.3
Linux ≫ Linux Kernel Version2.6.32.4
Linux ≫ Linux Kernel Version2.6.32.5
Linux ≫ Linux Kernel Version2.6.32.6
Linux ≫ Linux Kernel Version2.6.32.7
Linux ≫ Linux Kernel Version2.6.32.8
Linux ≫ Linux Kernel Version2.6.32.9
Linux ≫ Linux Kernel Version2.6.32.10
Linux ≫ Linux Kernel Version2.6.32.11
Linux ≫ Linux Kernel Version2.6.32.12
Linux ≫ Linux Kernel Version2.6.32.13
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.34% 0.257
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 1.9 3.4 2.9
AV:L/AC:M/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html
http://secunia.com/advisories/40645
http://www.vupen.com/english/advisories/2010/1857
http://secunia.com/advisories/39830
http://www.debian.org/security/2010/dsa-2053
http://lkml.org/lkml/2010/5/10/458
Patch
http://www.openwall.com/lists/oss-security/2010/04/29/3
http://www.openwall.com/lists/oss-security/2010/04/29/9
http://www.openwall.com/lists/oss-security/2010/04/30/1
https://exchange.xforce.ibmcloud.com/vulnerabilities/58840