8.1

CVE-2010-2943

Exploit

The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read or overwrite disk blocks that are currently assigned to an active file but were previously assigned to an unlinked file, by accessing a stale NFS filehandle.

Data is provided by the National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 2.6.35
Canonical ≫ Ubuntu Linux Version6.06 SwEdition-
Canonical ≫ Ubuntu Linux Version9.10
Canonical ≫ Ubuntu Linux Version10.04 SwEdition-
Canonical ≫ Ubuntu Linux Version10.10
VMware ≫ Esx Version4.0
VMware ≫ Esx Version4.1
Avaya ≫ Aura Presence Services Version6.0
Avaya ≫ Aura Presence Services Version6.1
Avaya ≫ Aura Presence Services Version6.1.1
Avaya ≫ Aura Session Manager Version1.1
Avaya ≫ Aura Session Manager Version5.2
Avaya ≫ Aura Session Manager Version6.0
Avaya ≫ Aura System Manager Version5.2
Avaya ≫ Aura System Manager Version6.0
Avaya ≫ Aura System Manager Version6.1
Avaya ≫ Aura System Manager Version6.1.1
Avaya ≫ Aura System Platform Version1.1
Avaya ≫ Aura System Platform Version6.0 Update-
Avaya ≫ Aura System Platform Version6.0 Updatesp1
Avaya ≫ Aura Voice Portal Version5.0
Avaya ≫ Aura Voice Portal Version5.1 Update-
Avaya ≫ Aura Voice Portal Version5.1 Updatesp1
Avaya ≫ Iq Version5.0
Avaya ≫ Iq Version5.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 3.82% 0.877
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 8.1 2.8 5.2
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
nvd@nist.gov 6.4 10 4.9
AV:N/AC:L/Au:N/C:P/I:P/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www.openwall.com/lists/oss-security/2010/08/18/2
Patch
Third Party Advisory
Mailing List
http://www.openwall.com/lists/oss-security/2010/08/19/5
Patch
Third Party Advisory
Mailing List
http://www.securityfocus.com/bid/42527
Third Party Advisory
Exploit
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=624923
Patch
Third Party Advisory
Issue Tracking