Search vulnerabilities

Results 2

Export CSV
CVE-2010-2492

kernel: ecryptfs_uid_hash() buffer overflow

Buffer overflow in the ecryptfs_uid_hash macro in fs/ecryptfs/messaging.c in the eCryptfs subsystem in the Linux kernel before 2.6.35 might allow local users to gain privileges or cause a denial of service (system crash) via unspecified vectors.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Avaya Linux Redhat and 1 more
CVE-2010-2943

kernel: xfs: validate inode numbers in file handles correctly

The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read or overwrite disk blocks that are currently assigned to an active file but were previously assigned to an unlinked file, by accessing a stale NFS filehandle.

CVSS 3.1 · 8.1 High EPSS 17.0% KEV · Not listed
Vendors
Avaya Canonical Linux and 2 more