10

CVE-2010-2521

Multiple buffer overflows in fs/nfsd/nfs4xdr.c in the XDR implementation in the NFS server in the Linux kernel before 2.6.34-rc6 allow remote attackers to cause a denial of service (panic) or possibly execute arbitrary code via a crafted NFSv4 compound WRITE request, related to the read_buf and nfsd4_decode_compound functions.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
LinuxLinux Kernel Updaterc5 Version <= 2.6.34
LinuxLinux Kernel Version2.6.0
LinuxLinux Kernel Version2.6.1
LinuxLinux Kernel Version2.6.2
LinuxLinux Kernel Version2.6.3
LinuxLinux Kernel Version2.6.4
LinuxLinux Kernel Version2.6.5
LinuxLinux Kernel Version2.6.6
LinuxLinux Kernel Version2.6.7
LinuxLinux Kernel Version2.6.8
LinuxLinux Kernel Version2.6.8.1
LinuxLinux Kernel Version2.6.9
LinuxLinux Kernel Version2.6.10
LinuxLinux Kernel Version2.6.11
LinuxLinux Kernel Version2.6.11.1
LinuxLinux Kernel Version2.6.11.2
LinuxLinux Kernel Version2.6.11.3
LinuxLinux Kernel Version2.6.11.4
LinuxLinux Kernel Version2.6.11.5
LinuxLinux Kernel Version2.6.11.6
LinuxLinux Kernel Version2.6.11.7
LinuxLinux Kernel Version2.6.11.8
LinuxLinux Kernel Version2.6.11.9
LinuxLinux Kernel Version2.6.11.10
LinuxLinux Kernel Version2.6.11.11
LinuxLinux Kernel Version2.6.11.12
LinuxLinux Kernel Version2.6.12
LinuxLinux Kernel Version2.6.12.1
LinuxLinux Kernel Version2.6.12.2
LinuxLinux Kernel Version2.6.12.3
LinuxLinux Kernel Version2.6.12.4
LinuxLinux Kernel Version2.6.12.5
LinuxLinux Kernel Version2.6.12.6
LinuxLinux Kernel Version2.6.13
LinuxLinux Kernel Version2.6.13.1
LinuxLinux Kernel Version2.6.13.2
LinuxLinux Kernel Version2.6.13.3
LinuxLinux Kernel Version2.6.13.4
LinuxLinux Kernel Version2.6.13.5
LinuxLinux Kernel Version2.6.14
LinuxLinux Kernel Version2.6.14.1
LinuxLinux Kernel Version2.6.14.3
LinuxLinux Kernel Version2.6.14.4
LinuxLinux Kernel Version2.6.14.5
LinuxLinux Kernel Version2.6.14.6
LinuxLinux Kernel Version2.6.14.7
LinuxLinux Kernel Version2.6.15
LinuxLinux Kernel Version2.6.15.1
LinuxLinux Kernel Version2.6.15.2
LinuxLinux Kernel Version2.6.15.3
LinuxLinux Kernel Version2.6.15.4
LinuxLinux Kernel Version2.6.15.5
LinuxLinux Kernel Version2.6.15.6
LinuxLinux Kernel Version2.6.15.7
LinuxLinux Kernel Version2.6.16
LinuxLinux Kernel Version2.6.16.1
LinuxLinux Kernel Version2.6.16.2
LinuxLinux Kernel Version2.6.16.3
LinuxLinux Kernel Version2.6.16.4
LinuxLinux Kernel Version2.6.16.5
LinuxLinux Kernel Version2.6.16.6
LinuxLinux Kernel Version2.6.16.7
LinuxLinux Kernel Version2.6.16.8
LinuxLinux Kernel Version2.6.16.9
LinuxLinux Kernel Version2.6.16.10
LinuxLinux Kernel Version2.6.16.11
LinuxLinux Kernel Version2.6.16.12
LinuxLinux Kernel Version2.6.16.13
LinuxLinux Kernel Version2.6.16.14
LinuxLinux Kernel Version2.6.16.15
LinuxLinux Kernel Version2.6.16.16
LinuxLinux Kernel Version2.6.16.17
LinuxLinux Kernel Version2.6.16.18
LinuxLinux Kernel Version2.6.16.19
LinuxLinux Kernel Version2.6.16.20
LinuxLinux Kernel Version2.6.16.21
LinuxLinux Kernel Version2.6.16.22
LinuxLinux Kernel Version2.6.16.23
LinuxLinux Kernel Version2.6.16.24
LinuxLinux Kernel Version2.6.16.25
LinuxLinux Kernel Version2.6.16.26
LinuxLinux Kernel Version2.6.16.27
LinuxLinux Kernel Version2.6.16.28
LinuxLinux Kernel Version2.6.16.29
LinuxLinux Kernel Version2.6.16.30
LinuxLinux Kernel Version2.6.16.31
LinuxLinux Kernel Version2.6.17
LinuxLinux Kernel Version2.6.17.1
LinuxLinux Kernel Version2.6.17.2
LinuxLinux Kernel Version2.6.17.3
LinuxLinux Kernel Version2.6.17.4
LinuxLinux Kernel Version2.6.17.5
LinuxLinux Kernel Version2.6.17.6
LinuxLinux Kernel Version2.6.17.7
LinuxLinux Kernel Version2.6.17.8
LinuxLinux Kernel Version2.6.17.9
LinuxLinux Kernel Version2.6.17.10
LinuxLinux Kernel Version2.6.17.11
LinuxLinux Kernel Version2.6.17.12
LinuxLinux Kernel Version2.6.17.13
LinuxLinux Kernel Version2.6.17.14
LinuxLinux Kernel Version2.6.18.1
LinuxLinux Kernel Version2.6.18.2
LinuxLinux Kernel Version2.6.18.3
LinuxLinux Kernel Version2.6.18.4
LinuxLinux Kernel Version2.6.18.5
LinuxLinux Kernel Version2.6.18.6
LinuxLinux Kernel Version2.6.18.7
LinuxLinux Kernel Version2.6.18.8
LinuxLinux Kernel Version2.6.22
LinuxLinux Kernel Version2.6.22.2
LinuxLinux Kernel Version2.6.22.3
LinuxLinux Kernel Version2.6.22.4
LinuxLinux Kernel Version2.6.22.5
LinuxLinux Kernel Version2.6.22.6
LinuxLinux Kernel Version2.6.22.7
LinuxLinux Kernel Version2.6.23
LinuxLinux Kernel Version2.6.23 Updaterc1
LinuxLinux Kernel Version2.6.23 Updaterc2
LinuxLinux Kernel Version2.6.23.1
LinuxLinux Kernel Version2.6.23.2
LinuxLinux Kernel Version2.6.23.3
LinuxLinux Kernel Version2.6.23.4
LinuxLinux Kernel Version2.6.23.5
LinuxLinux Kernel Version2.6.23.6
LinuxLinux Kernel Version2.6.23.7
LinuxLinux Kernel Version2.6.24 Updaterc1
LinuxLinux Kernel Version2.6.24 Updaterc2
LinuxLinux Kernel Version2.6.24 Updaterc3
LinuxLinux Kernel Version2.6.24 Updaterc4
LinuxLinux Kernel Version2.6.24 Updaterc5
LinuxLinux Kernel Version2.6.32
LinuxLinux Kernel Version2.6.32.1
LinuxLinux Kernel Version2.6.32.2
LinuxLinux Kernel Version2.6.32.3
LinuxLinux Kernel Version2.6.32.4
LinuxLinux Kernel Version2.6.33
LinuxLinux Kernel Version2.6.33 Updaterc1
LinuxLinux Kernel Version2.6.33 Updaterc2
LinuxLinux Kernel Version2.6.33 Updaterc3
LinuxLinux Kernel Version2.6.33 Updaterc4
LinuxLinux Kernel Version2.6.33 Updaterc5
LinuxLinux Kernel Version2.6.33 Updaterc6
LinuxLinux Kernel Version2.6.33.1
LinuxLinux Kernel Version2.6.33.2
LinuxLinux Kernel Version2.6.34 Updaterc1
LinuxLinux Kernel Version2.6.34 Updaterc2
LinuxLinux Kernel Version2.6.34 Updaterc3
LinuxLinux Kernel Version2.6.34 Updaterc4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 8.98% 0.946
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://www.mandriva.com/security/advisories?name=MDVSA-2011:051
http://www.securityfocus.com/archive/1/516397/100/0/threaded
http://www.vmware.com/security/advisories/VMSA-2011-0003.html
http://www.mandriva.com/security/advisories?name=MDVSA-2010:198
http://secunia.com/advisories/43315
http://www.redhat.com/support/errata/RHSA-2010-0610.html
http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html
http://www.debian.org/security/2010/dsa-2094
http://www.ubuntu.com/usn/USN-1000-1
https://rhn.redhat.com/errata/RHSA-2010-0606.html
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2bc3c1179c781b359d4f2f3439cb3df72afc17fc
http://securitytracker.com/id?1024286
http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.34/ChangeLog-2.6.34-rc6
http://www.openwall.com/lists/oss-security/2010/07/07/1
http://www.openwall.com/lists/oss-security/2010/07/09/2
http://www.redhat.com/support/errata/RHSA-2010-0893.html
http://www.redhat.com/support/errata/RHSA-2010-0907.html
http://www.securityfocus.com/bid/42249
http://www.vupen.com/english/advisories/2010/3050
https://bugzilla.redhat.com/show_bug.cgi?id=612028