CVE-2010-2538

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2010-2538
Integer overflow in the btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the Linux kernel before 2.6.35 might allow local users to obtain sensitive information via a BTRFS_IOC_CLONE_RANGE ioctl call.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

4.9 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:L/Au:N/C:C/I:N/A:N

Exploitability : 3.9 / Impact : 6.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2ebc3464781ad24474abcbd2274e6254689853b5
http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html Mailing List Third Party Advisory
http://secunia.com/advisories/42758 Broken Link
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35 Broken Link
http://www.openwall.com/lists/oss-security/2010/07/21/10 Mailing List Patch Third Party Advisory
http://www.openwall.com/lists/oss-security/2010/07/21/4 Mailing List Patch Third Party Advisory
http://www.securityfocus.com/bid/41854 Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-1041-1 Third Party Advisory
http://www.vupen.com/english/advisories/2011/0070 Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=616998 Issue Tracking Patch Third Party Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2ebc3464781ad24474abcbd2274e6254689853b5
http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html Mailing List Third Party Advisory
http://secunia.com/advisories/42758 Broken Link
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35 Broken Link
http://www.openwall.com/lists/oss-security/2010/07/21/10 Mailing List Patch Third Party Advisory
http://www.openwall.com/lists/oss-security/2010/07/21/4 Mailing List Patch Third Party Advisory
http://www.securityfocus.com/bid/41854 Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-1041-1 Third Party Advisory
http://www.vupen.com/english/advisories/2011/0070 Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=616998 Issue Tracking Patch Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:o:suse:linux_enterprise_desktop:11:sp1:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_high_availability_extension:11:sp1:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:*:*:*:*
History

21 Nov 2024, 01:16

Type Values Removed Values Added
References () http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2ebc3464781ad24474abcbd2274e6254689853b5 - () http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2ebc3464781ad24474abcbd2274e6254689853b5 -
References () http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html - Mailing List, Third Party Advisory () http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html - Mailing List, Third Party Advisory
References () http://secunia.com/advisories/42758 - Broken Link () http://secunia.com/advisories/42758 - Broken Link
References () http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35 - Broken Link () http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35 - Broken Link
References () http://www.openwall.com/lists/oss-security/2010/07/21/10 - Mailing List, Patch, Third Party Advisory () http://www.openwall.com/lists/oss-security/2010/07/21/10 - Mailing List, Patch, Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2010/07/21/4 - Mailing List, Patch, Third Party Advisory () http://www.openwall.com/lists/oss-security/2010/07/21/4 - Mailing List, Patch, Third Party Advisory
References () http://www.securityfocus.com/bid/41854 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/41854 - Third Party Advisory, VDB Entry
References () http://www.ubuntu.com/usn/USN-1041-1 - Third Party Advisory () http://www.ubuntu.com/usn/USN-1041-1 - Third Party Advisory
References () http://www.vupen.com/english/advisories/2011/0070 - Broken Link () http://www.vupen.com/english/advisories/2011/0070 - Broken Link
References () https://bugzilla.redhat.com/show_bug.cgi?id=616998 - Issue Tracking, Patch, Third Party Advisory () https://bugzilla.redhat.com/show_bug.cgi?id=616998 - Issue Tracking, Patch, Third Party Advisory
Information

Published : 2010-09-30 15:00

Updated : 2024-11-21 01:16

NVD link : CVE-2010-2538

Mitre link : CVE-2010-2538

CVE.ORG link : CVE-2010-2538

JSON object : View

Products Affected

suse

  • linux_enterprise_high_availability_extension
  • linux_enterprise_desktop
  • linux_enterprise_server

linux

  • linux_kernel

canonical

  • ubuntu_linux
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor


NetmanageIT Website NetmanageIT OSINT Web NetmanageIT OpenCTI NetmanageIT PDF Tools NetmanageIT CTO Corner Blog NetmanageIT Email Header Analyzer NetmanageIT Password Pusher NetmanageIT Internet Health and Latency Dashboard NetmanageIT Dedicated Speed Test Site NetmanageIT Ubuntu Mirror 10Gbps Copyright OpenCVE 2024