2.1

CVE-2010-2226

The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux kernel before 2.6.35 does not properly check the file descriptors passed to the SWAPEXT ioctl, which allows local users to leverage write access and obtain read access by swapping one file into another file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 2.6.35
Suse ≫ Linux Enterprise Desktop Version 10 Update sp3
Suse ≫ Linux Enterprise Server Version 10 Update sp3
Debian ≫ Debian Linux Version 5.0
Canonical ≫ Ubuntu Linux Version 6.06
Canonical ≫ Ubuntu Linux Version 8.04 SwEdition -
Canonical ≫ Ubuntu Linux Version 9.04
Canonical ≫ Ubuntu Linux Version 9.10
Canonical ≫ Ubuntu Linux Version 10.04 SwEdition -
Canonical ≫ Ubuntu Linux Version 10.10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.43% 0.345
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www.securityfocus.com/archive/1/516397/100/0/threaded
Third Party Advisory
VDB Entry
http://www.vmware.com/security/advisories/VMSA-2011-0003.html
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2010:198
Third Party Advisory
http://secunia.com/advisories/43315
Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2010-0610.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html
Third Party Advisory
Mailing List
http://www.debian.org/security/2010/dsa-2094
Third Party Advisory
http://www.ubuntu.com/usn/USN-1000-1
Third Party Advisory
http://www.vupen.com/english/advisories/2011/0298
Third Party Advisory
http://archives.free.net.ph/message/20100616.130710.301704aa.en.html
Broken Link
http://archives.free.net.ph/message/20100616.135735.40f53a32.en.html
Broken Link
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1817176a86352f65210139d4c794ad2d19fc6b63
http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html
Third Party Advisory
Mailing List
http://marc.info/?l=oss-security&m=127677135609357&w=2
Third Party Advisory
http://marc.info/?l=oss-security&m=127687486331790&w=2
Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35
Broken Link
http://www.securityfocus.com/bid/40920
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=605158
Third Party Advisory
Issue Tracking