7.8

CVE-2010-2248

fs/cifs/cifssmb.c in the CIFS implementation in the Linux kernel before 2.6.34-rc4 allows remote attackers to cause a denial of service (panic) via an SMB response packet with an invalid CountHigh value, as demonstrated by a response from an OS/2 server, related to the CIFSSMBWrite and CIFSSMBWrite2 functions.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Update rc3 Version <= 2.6.34
Linux ≫ Linux Kernel Version 2.6.0
Linux ≫ Linux Kernel Version 2.6.1
Linux ≫ Linux Kernel Version 2.6.2
Linux ≫ Linux Kernel Version 2.6.3
Linux ≫ Linux Kernel Version 2.6.4
Linux ≫ Linux Kernel Version 2.6.5
Linux ≫ Linux Kernel Version 2.6.6
Linux ≫ Linux Kernel Version 2.6.7
Linux ≫ Linux Kernel Version 2.6.8
Linux ≫ Linux Kernel Version 2.6.8.1
Linux ≫ Linux Kernel Version 2.6.9
Linux ≫ Linux Kernel Version 2.6.10
Linux ≫ Linux Kernel Version 2.6.11
Linux ≫ Linux Kernel Version 2.6.11.1
Linux ≫ Linux Kernel Version 2.6.11.2
Linux ≫ Linux Kernel Version 2.6.11.3
Linux ≫ Linux Kernel Version 2.6.11.4
Linux ≫ Linux Kernel Version 2.6.11.5
Linux ≫ Linux Kernel Version 2.6.11.6
Linux ≫ Linux Kernel Version 2.6.11.7
Linux ≫ Linux Kernel Version 2.6.11.8
Linux ≫ Linux Kernel Version 2.6.11.9
Linux ≫ Linux Kernel Version 2.6.11.10
Linux ≫ Linux Kernel Version 2.6.11.11
Linux ≫ Linux Kernel Version 2.6.11.12
Linux ≫ Linux Kernel Version 2.6.12
Linux ≫ Linux Kernel Version 2.6.12.1
Linux ≫ Linux Kernel Version 2.6.12.2
Linux ≫ Linux Kernel Version 2.6.12.3
Linux ≫ Linux Kernel Version 2.6.12.4
Linux ≫ Linux Kernel Version 2.6.12.5
Linux ≫ Linux Kernel Version 2.6.12.6
Linux ≫ Linux Kernel Version 2.6.13
Linux ≫ Linux Kernel Version 2.6.13.1
Linux ≫ Linux Kernel Version 2.6.13.2
Linux ≫ Linux Kernel Version 2.6.13.3
Linux ≫ Linux Kernel Version 2.6.13.4
Linux ≫ Linux Kernel Version 2.6.13.5
Linux ≫ Linux Kernel Version 2.6.14
Linux ≫ Linux Kernel Version 2.6.14.1
Linux ≫ Linux Kernel Version 2.6.14.3
Linux ≫ Linux Kernel Version 2.6.14.4
Linux ≫ Linux Kernel Version 2.6.14.5
Linux ≫ Linux Kernel Version 2.6.14.6
Linux ≫ Linux Kernel Version 2.6.14.7
Linux ≫ Linux Kernel Version 2.6.15
Linux ≫ Linux Kernel Version 2.6.15.1
Linux ≫ Linux Kernel Version 2.6.15.2
Linux ≫ Linux Kernel Version 2.6.15.3
Linux ≫ Linux Kernel Version 2.6.15.4
Linux ≫ Linux Kernel Version 2.6.15.5
Linux ≫ Linux Kernel Version 2.6.15.6
Linux ≫ Linux Kernel Version 2.6.15.7
Linux ≫ Linux Kernel Version 2.6.16
Linux ≫ Linux Kernel Version 2.6.16.1
Linux ≫ Linux Kernel Version 2.6.16.2
Linux ≫ Linux Kernel Version 2.6.16.3
Linux ≫ Linux Kernel Version 2.6.16.4
Linux ≫ Linux Kernel Version 2.6.16.5
Linux ≫ Linux Kernel Version 2.6.16.6
Linux ≫ Linux Kernel Version 2.6.16.7
Linux ≫ Linux Kernel Version 2.6.16.8
Linux ≫ Linux Kernel Version 2.6.16.9
Linux ≫ Linux Kernel Version 2.6.16.10
Linux ≫ Linux Kernel Version 2.6.16.11
Linux ≫ Linux Kernel Version 2.6.16.12
Linux ≫ Linux Kernel Version 2.6.16.13
Linux ≫ Linux Kernel Version 2.6.16.14
Linux ≫ Linux Kernel Version 2.6.16.15
Linux ≫ Linux Kernel Version 2.6.16.16
Linux ≫ Linux Kernel Version 2.6.16.17
Linux ≫ Linux Kernel Version 2.6.16.18
Linux ≫ Linux Kernel Version 2.6.16.19
Linux ≫ Linux Kernel Version 2.6.16.20
Linux ≫ Linux Kernel Version 2.6.16.21
Linux ≫ Linux Kernel Version 2.6.16.22
Linux ≫ Linux Kernel Version 2.6.16.23
Linux ≫ Linux Kernel Version 2.6.16.24
Linux ≫ Linux Kernel Version 2.6.16.25
Linux ≫ Linux Kernel Version 2.6.16.26
Linux ≫ Linux Kernel Version 2.6.16.27
Linux ≫ Linux Kernel Version 2.6.16.28
Linux ≫ Linux Kernel Version 2.6.16.29
Linux ≫ Linux Kernel Version 2.6.16.30
Linux ≫ Linux Kernel Version 2.6.16.31
Linux ≫ Linux Kernel Version 2.6.17
Linux ≫ Linux Kernel Version 2.6.17.1
Linux ≫ Linux Kernel Version 2.6.17.2
Linux ≫ Linux Kernel Version 2.6.17.3
Linux ≫ Linux Kernel Version 2.6.17.4
Linux ≫ Linux Kernel Version 2.6.17.5
Linux ≫ Linux Kernel Version 2.6.17.6
Linux ≫ Linux Kernel Version 2.6.17.7
Linux ≫ Linux Kernel Version 2.6.17.8
Linux ≫ Linux Kernel Version 2.6.17.9
Linux ≫ Linux Kernel Version 2.6.17.10
Linux ≫ Linux Kernel Version 2.6.17.11
Linux ≫ Linux Kernel Version 2.6.17.12
Linux ≫ Linux Kernel Version 2.6.17.13
Linux ≫ Linux Kernel Version 2.6.17.14
Linux ≫ Linux Kernel Version 2.6.18.1
Linux ≫ Linux Kernel Version 2.6.18.2
Linux ≫ Linux Kernel Version 2.6.18.3
Linux ≫ Linux Kernel Version 2.6.18.4
Linux ≫ Linux Kernel Version 2.6.18.5
Linux ≫ Linux Kernel Version 2.6.18.6
Linux ≫ Linux Kernel Version 2.6.18.7
Linux ≫ Linux Kernel Version 2.6.18.8
Linux ≫ Linux Kernel Version 2.6.22
Linux ≫ Linux Kernel Version 2.6.22.2
Linux ≫ Linux Kernel Version 2.6.22.3
Linux ≫ Linux Kernel Version 2.6.22.4
Linux ≫ Linux Kernel Version 2.6.22.5
Linux ≫ Linux Kernel Version 2.6.22.6
Linux ≫ Linux Kernel Version 2.6.22.7
Linux ≫ Linux Kernel Version 2.6.23
Linux ≫ Linux Kernel Version 2.6.23 Update rc1
Linux ≫ Linux Kernel Version 2.6.23 Update rc2
Linux ≫ Linux Kernel Version 2.6.23.1
Linux ≫ Linux Kernel Version 2.6.23.2
Linux ≫ Linux Kernel Version 2.6.23.3
Linux ≫ Linux Kernel Version 2.6.23.4
Linux ≫ Linux Kernel Version 2.6.23.5
Linux ≫ Linux Kernel Version 2.6.23.6
Linux ≫ Linux Kernel Version 2.6.23.7
Linux ≫ Linux Kernel Version 2.6.24 Update rc1
Linux ≫ Linux Kernel Version 2.6.24 Update rc2
Linux ≫ Linux Kernel Version 2.6.24 Update rc3
Linux ≫ Linux Kernel Version 2.6.24 Update rc4
Linux ≫ Linux Kernel Version 2.6.24 Update rc5
Linux ≫ Linux Kernel Version 2.6.32
Linux ≫ Linux Kernel Version 2.6.32.1
Linux ≫ Linux Kernel Version 2.6.32.2
Linux ≫ Linux Kernel Version 2.6.32.3
Linux ≫ Linux Kernel Version 2.6.32.4
Linux ≫ Linux Kernel Version 2.6.33
Linux ≫ Linux Kernel Version 2.6.33 Update rc1
Linux ≫ Linux Kernel Version 2.6.33 Update rc2
Linux ≫ Linux Kernel Version 2.6.33 Update rc3
Linux ≫ Linux Kernel Version 2.6.33 Update rc4
Linux ≫ Linux Kernel Version 2.6.33 Update rc5
Linux ≫ Linux Kernel Version 2.6.33 Update rc6
Linux ≫ Linux Kernel Version 2.6.33.1
Linux ≫ Linux Kernel Version 2.6.33.2
Linux ≫ Linux Kernel Version 2.6.34 Update rc1
Linux ≫ Linux Kernel Version 2.6.34 Update rc2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.03% 0.893
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.mandriva.com/security/advisories?name=MDVSA-2011:051
http://www.securityfocus.com/archive/1/516397/100/0/threaded
http://www.vmware.com/security/advisories/VMSA-2011-0003.html
http://www.mandriva.com/security/advisories?name=MDVSA-2010:198
http://secunia.com/advisories/43315
http://www.redhat.com/support/errata/RHSA-2010-0610.html
http://www.debian.org/security/2010/dsa-2094
http://www.ubuntu.com/usn/USN-1000-1
http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6513a81e9325d712f1bfb9a1d7b750134e49ff18
http://securitytracker.com/id?1024285
http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.34/ChangeLog-2.6.34-rc4
http://www.openwall.com/lists/oss-security/2010/06/28/1
http://www.openwall.com/lists/oss-security/2010/06/28/6
http://www.securityfocus.com/bid/42242
Patch
https://bugzilla.redhat.com/show_bug.cgi?id=608583
https://rhn.redhat.com/errata/RHSA-2010-0606.html