2.1

CVE-2010-1636

Exploit
The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the btrfs functionality in the Linux kernel 2.6.29 through 2.6.32, and possibly other versions, does not ensure that a cloned file descriptor has been opened for reading, which allows local users to read sensitive information from a write-only file descriptor.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version 2.6.29
Linux ≫ Linux Kernel Version 2.6.29.1
Linux ≫ Linux Kernel Version 2.6.29.2
Linux ≫ Linux Kernel Version 2.6.29.3
Linux ≫ Linux Kernel Version 2.6.29.4
Linux ≫ Linux Kernel Version 2.6.29.5
Linux ≫ Linux Kernel Version 2.6.29.6
Linux ≫ Linux Kernel Version 2.6.30
Linux ≫ Linux Kernel Version 2.6.30.1
Linux ≫ Linux Kernel Version 2.6.30.2
Linux ≫ Linux Kernel Version 2.6.30.3
Linux ≫ Linux Kernel Version 2.6.30.4
Linux ≫ Linux Kernel Version 2.6.30.5
Linux ≫ Linux Kernel Version 2.6.30.6
Linux ≫ Linux Kernel Version 2.6.30.7
Linux ≫ Linux Kernel Version 2.6.30.8
Linux ≫ Linux Kernel Version 2.6.30.9
Linux ≫ Linux Kernel Version 2.6.30.10
Linux ≫ Linux Kernel Version 2.6.31
Linux ≫ Linux Kernel Version 2.6.31.1
Linux ≫ Linux Kernel Version 2.6.31.2
Linux ≫ Linux Kernel Version 2.6.31.3
Linux ≫ Linux Kernel Version 2.6.31.4
Linux ≫ Linux Kernel Version 2.6.31.5
Linux ≫ Linux Kernel Version 2.6.31.6
Linux ≫ Linux Kernel Version 2.6.31.7
Linux ≫ Linux Kernel Version 2.6.31.8
Linux ≫ Linux Kernel Version 2.6.31.9
Linux ≫ Linux Kernel Version 2.6.31.10
Linux ≫ Linux Kernel Version 2.6.31.11
Linux ≫ Linux Kernel Version 2.6.31.12
Linux ≫ Linux Kernel Version 2.6.31.13
Linux ≫ Linux Kernel Version 2.6.32
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.83% 0.527
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=5dc6416414fb3ec6e2825fd4d20c8bf1d7fe0395
http://www.openwall.com/lists/oss-security/2010/05/18/10
http://www.openwall.com/lists/oss-security/2010/05/18/2
Patch
http://www.openwall.com/lists/oss-security/2010/05/25/8
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/579585
Patch
Exploit
https://bugzilla.redhat.com/show_bug.cgi?id=593226
Exploit