CVE

Id
44020  
CVE No.
CVE-2010-1436  
Status
Candidate  
Description
gfs2 in the Linux kernel 2.6.18, and possibly other versions, does not properly handle when the gfs2_quota struct occupies two separate pages, which allows local users to cause a denial of service (kernel panic) via certain manipulations that cause an out-of-bounds write, as demonstrated by writing from an ext3 file system to a gfs2 file system.  
Phase
Assigned (20100415)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
480441 44020 CVE-2010-1436 BUGTRAQ:20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX  View
480442 44020 CVE-2010-1436 URL:http://www.securityfocus.com/archive/1/archive/1/516397/100/0/threaded  View
480443 44020 CVE-2010-1436 MLIST:[oss-security] 20100427 CVE request - gfs2 kernel issue  View
480444 44020 CVE-2010-1436 URL:http://www.openwall.com/lists/oss-security/2010/04/27/1  View
480445 44020 CVE-2010-1436 MLIST:[oss-security] 20100427 Re: CVE request - gfs2 kernel issue  View
480446 44020 CVE-2010-1436 URL:http://www.openwall.com/lists/oss-security/2010/04/28/1  View
480447 44020 CVE-2010-1436 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=586006  View
480448 44020 CVE-2010-1436 CONFIRM:http://www.vmware.com/security/advisories/VMSA-2011-0003.html  View
480449 44020 CVE-2010-1436 OVAL:oval:org.mitre.oval:def:10652  View
480450 44020 CVE-2010-1436 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10652  View
480451 44020 CVE-2010-1436 SECUNIA:43315  View
480452 44020 CVE-2010-1436 URL:http://secunia.com/advisories/43315  View
480453 44020 CVE-2010-1436 XF:kernel-gfs2quota-dos(58839)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35688 JVNDB-2010-001468 TeX Live 2009 および teTeX の dvipsk/dospecial.c における整数オーバーフローの脆弱性 TeX Live 2009 および teTeX の dvips にある dvipsk/dospecial.c には、特定のコマンドを含む DVI ファイルの処理に関して不備があるため、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2010-1440 44020 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001468.html  View