4.6

CVE-2010-1641

The do_gfs2_set_flags function in fs/gfs2/file.c in the Linux kernel before 2.6.34-git10 does not verify the ownership of a file, which allows local users to bypass intended access restrictions via a SETFLAGS ioctl request.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
LinuxLinux Kernel Updategit9 Version <= 2.6.34
LinuxLinux Kernel Version2.6.0
LinuxLinux Kernel Version2.6.1
LinuxLinux Kernel Version2.6.2
LinuxLinux Kernel Version2.6.3
LinuxLinux Kernel Version2.6.4
LinuxLinux Kernel Version2.6.5
LinuxLinux Kernel Version2.6.6
LinuxLinux Kernel Version2.6.7
LinuxLinux Kernel Version2.6.8
LinuxLinux Kernel Version2.6.8.1
LinuxLinux Kernel Version2.6.9
LinuxLinux Kernel Version2.6.10
LinuxLinux Kernel Version2.6.11
LinuxLinux Kernel Version2.6.11.1
LinuxLinux Kernel Version2.6.11.2
LinuxLinux Kernel Version2.6.11.3
LinuxLinux Kernel Version2.6.11.4
LinuxLinux Kernel Version2.6.11.5
LinuxLinux Kernel Version2.6.11.6
LinuxLinux Kernel Version2.6.11.7
LinuxLinux Kernel Version2.6.11.8
LinuxLinux Kernel Version2.6.11.9
LinuxLinux Kernel Version2.6.11.10
LinuxLinux Kernel Version2.6.11.11
LinuxLinux Kernel Version2.6.11.12
LinuxLinux Kernel Version2.6.12
LinuxLinux Kernel Version2.6.12.1
LinuxLinux Kernel Version2.6.12.2
LinuxLinux Kernel Version2.6.12.3
LinuxLinux Kernel Version2.6.12.4
LinuxLinux Kernel Version2.6.12.5
LinuxLinux Kernel Version2.6.12.6
LinuxLinux Kernel Version2.6.13
LinuxLinux Kernel Version2.6.13.1
LinuxLinux Kernel Version2.6.13.2
LinuxLinux Kernel Version2.6.13.3
LinuxLinux Kernel Version2.6.13.4
LinuxLinux Kernel Version2.6.13.5
LinuxLinux Kernel Version2.6.14
LinuxLinux Kernel Version2.6.14.1
LinuxLinux Kernel Version2.6.14.3
LinuxLinux Kernel Version2.6.14.4
LinuxLinux Kernel Version2.6.14.5
LinuxLinux Kernel Version2.6.14.6
LinuxLinux Kernel Version2.6.14.7
LinuxLinux Kernel Version2.6.15
LinuxLinux Kernel Version2.6.15.1
LinuxLinux Kernel Version2.6.15.2
LinuxLinux Kernel Version2.6.15.3
LinuxLinux Kernel Version2.6.15.4
LinuxLinux Kernel Version2.6.15.5
LinuxLinux Kernel Version2.6.15.6
LinuxLinux Kernel Version2.6.15.7
LinuxLinux Kernel Version2.6.16
LinuxLinux Kernel Version2.6.16.1
LinuxLinux Kernel Version2.6.16.2
LinuxLinux Kernel Version2.6.16.3
LinuxLinux Kernel Version2.6.16.4
LinuxLinux Kernel Version2.6.16.5
LinuxLinux Kernel Version2.6.16.6
LinuxLinux Kernel Version2.6.16.7
LinuxLinux Kernel Version2.6.16.8
LinuxLinux Kernel Version2.6.16.9
LinuxLinux Kernel Version2.6.16.10
LinuxLinux Kernel Version2.6.16.11
LinuxLinux Kernel Version2.6.16.12
LinuxLinux Kernel Version2.6.16.13
LinuxLinux Kernel Version2.6.16.14
LinuxLinux Kernel Version2.6.16.15
LinuxLinux Kernel Version2.6.16.16
LinuxLinux Kernel Version2.6.16.17
LinuxLinux Kernel Version2.6.16.18
LinuxLinux Kernel Version2.6.16.19
LinuxLinux Kernel Version2.6.16.20
LinuxLinux Kernel Version2.6.16.21
LinuxLinux Kernel Version2.6.16.22
LinuxLinux Kernel Version2.6.16.23
LinuxLinux Kernel Version2.6.16.24
LinuxLinux Kernel Version2.6.16.25
LinuxLinux Kernel Version2.6.16.26
LinuxLinux Kernel Version2.6.16.27
LinuxLinux Kernel Version2.6.16.28
LinuxLinux Kernel Version2.6.16.29
LinuxLinux Kernel Version2.6.16.30
LinuxLinux Kernel Version2.6.16.31
LinuxLinux Kernel Version2.6.17
LinuxLinux Kernel Version2.6.17.1
LinuxLinux Kernel Version2.6.17.2
LinuxLinux Kernel Version2.6.17.3
LinuxLinux Kernel Version2.6.17.4
LinuxLinux Kernel Version2.6.17.5
LinuxLinux Kernel Version2.6.17.6
LinuxLinux Kernel Version2.6.17.7
LinuxLinux Kernel Version2.6.17.8
LinuxLinux Kernel Version2.6.17.9
LinuxLinux Kernel Version2.6.17.10
LinuxLinux Kernel Version2.6.17.11
LinuxLinux Kernel Version2.6.17.12
LinuxLinux Kernel Version2.6.17.13
LinuxLinux Kernel Version2.6.17.14
LinuxLinux Kernel Version2.6.18.1
LinuxLinux Kernel Version2.6.18.2
LinuxLinux Kernel Version2.6.18.3
LinuxLinux Kernel Version2.6.18.4
LinuxLinux Kernel Version2.6.18.5
LinuxLinux Kernel Version2.6.18.6
LinuxLinux Kernel Version2.6.18.7
LinuxLinux Kernel Version2.6.18.8
LinuxLinux Kernel Version2.6.22
LinuxLinux Kernel Version2.6.22.2
LinuxLinux Kernel Version2.6.22.3
LinuxLinux Kernel Version2.6.22.4
LinuxLinux Kernel Version2.6.22.5
LinuxLinux Kernel Version2.6.22.6
LinuxLinux Kernel Version2.6.22.7
LinuxLinux Kernel Version2.6.23
LinuxLinux Kernel Version2.6.23 Updaterc1
LinuxLinux Kernel Version2.6.23 Updaterc2
LinuxLinux Kernel Version2.6.23.1
LinuxLinux Kernel Version2.6.23.2
LinuxLinux Kernel Version2.6.23.3
LinuxLinux Kernel Version2.6.23.4
LinuxLinux Kernel Version2.6.23.5
LinuxLinux Kernel Version2.6.23.6
LinuxLinux Kernel Version2.6.23.7
LinuxLinux Kernel Version2.6.24 Updaterc1
LinuxLinux Kernel Version2.6.24 Updaterc2
LinuxLinux Kernel Version2.6.24 Updaterc3
LinuxLinux Kernel Version2.6.24 Updaterc4
LinuxLinux Kernel Version2.6.24 Updaterc5
LinuxLinux Kernel Version2.6.32
LinuxLinux Kernel Version2.6.32.1
LinuxLinux Kernel Version2.6.32.2
LinuxLinux Kernel Version2.6.32.3
LinuxLinux Kernel Version2.6.32.4
LinuxLinux Kernel Version2.6.33
LinuxLinux Kernel Version2.6.33 Updaterc1
LinuxLinux Kernel Version2.6.33 Updaterc2
LinuxLinux Kernel Version2.6.33 Updaterc3
LinuxLinux Kernel Version2.6.33 Updaterc4
LinuxLinux Kernel Version2.6.33 Updaterc5
LinuxLinux Kernel Version2.6.33 Updaterc6
LinuxLinux Kernel Version2.6.33.1
LinuxLinux Kernel Version2.6.33.2
LinuxLinux Kernel Version2.6.34 Updategit1
LinuxLinux Kernel Version2.6.34 Updategit2
LinuxLinux Kernel Version2.6.34 Updategit3
LinuxLinux Kernel Version2.6.34 Updategit4
LinuxLinux Kernel Version2.6.34 Updategit5
LinuxLinux Kernel Version2.6.34 Updategit6
LinuxLinux Kernel Version2.6.34 Updategit7
LinuxLinux Kernel Version2.6.34 Updategit8
LinuxLinux Kernel Version2.6.34 Updaterc1
LinuxLinux Kernel Version2.6.34 Updaterc2
LinuxLinux Kernel Version2.6.34 Updaterc3
LinuxLinux Kernel Version2.6.34 Updaterc4
LinuxLinux Kernel Version2.6.34 Updaterc5
LinuxLinux Kernel Version2.6.34 Updaterc6
LinuxLinux Kernel Version2.6.34 Updaterc7
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.38% 0.3
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.securityfocus.com/archive/1/516397/100/0/threaded
http://www.vmware.com/security/advisories/VMSA-2011-0003.html
http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html
http://secunia.com/advisories/40645
http://www.vupen.com/english/advisories/2010/1857
http://secunia.com/advisories/43315
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7df0e0397b9a18358573274db9fdab991941062f
http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00000.html
http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/incr/patch-2.6.34-git9-git10.bz2
Patch
http://www.openwall.com/lists/oss-security/2010/05/25/1
http://www.openwall.com/lists/oss-security/2010/05/25/12
http://www.openwall.com/lists/oss-security/2010/05/26/1
http://www.securityfocus.com/bid/40356
https://bugzilla.redhat.com/show_bug.cgi?id=595579
https://exchange.xforce.ibmcloud.com/vulnerabilities/58926
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9916
https://www.redhat.com/archives/cluster-devel/2010-May/msg00049.html