CVE

Id
44021  
CVE No.
CVE-2010-1437  
Status
Candidate  
Description
Race condition in the find_keyring_by_name function in security/keys/keyring.c in the Linux kernel 2.6.34-rc5 and earlier allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via keyctl session commands that trigger access to a dead keyring that is undergoing deletion by the key_cleanup function.  
Phase
Assigned (20100415)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
480454 44021 CVE-2010-1437 BUGTRAQ:20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX  View
480455 44021 CVE-2010-1437 URL:http://www.securityfocus.com/archive/1/archive/1/516397/100/0/threaded  View
480456 44021 CVE-2010-1437 MLIST:[linux-kernel] 20100422 [PATCH 0/1][BUG][IMPORTANT] KEYRINGS: find_keyring_by_name() can gain the freed keyring  View
480457 44021 CVE-2010-1437 URL:http://marc.info/?l=linux-kernel&m=127192182917857&w=2  View
480458 44021 CVE-2010-1437 MLIST:[linux-kernel] 20100430 [PATCH 2/7] KEYS: find_keyring_by_name() can gain access to a freed keyring  View
480459 44021 CVE-2010-1437 URL:http://marc.info/?l=linux-kernel&m=127274294622730&w=2  View
480460 44021 CVE-2010-1437 MLIST:[linux-kernel] 20100503 Re: [PATCH 2/7] KEYS: find_keyring_by_name() can gain access to a freed keyring  View
480461 44021 CVE-2010-1437 URL:http://marc.info/?l=linux-kernel&m=127292492727029&w=2  View
480462 44021 CVE-2010-1437 MLIST:[oss-security] 20100427 CVE request - kernel: find_keyring_by_name() can gain the freed keyring  View
480463 44021 CVE-2010-1437 URL:http://www.openwall.com/lists/oss-security/2010/04/27/2  View
480464 44021 CVE-2010-1437 MLIST:[oss-security] 20100427 Re: CVE request - kernel: find_keyring_by_name() can gain the freed keyring  View
480465 44021 CVE-2010-1437 URL:http://www.openwall.com/lists/oss-security/2010/04/28/2  View
480466 44021 CVE-2010-1437 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=585094  View
480467 44021 CVE-2010-1437 CONFIRM:https://patchwork.kernel.org/patch/94038/  View
480468 44021 CVE-2010-1437 CONFIRM:https://patchwork.kernel.org/patch/94664/  View
480469 44021 CVE-2010-1437 CONFIRM:http://www.vmware.com/security/advisories/VMSA-2011-0003.html  View
480470 44021 CVE-2010-1437 DEBIAN:DSA-2053  View
480471 44021 CVE-2010-1437 URL:http://www.debian.org/security/2010/dsa-2053  View
480472 44021 CVE-2010-1437 REDHAT:RHSA-2010:0474  View
480473 44021 CVE-2010-1437 URL:http://www.redhat.com/support/errata/RHSA-2010-0474.html  View
480474 44021 CVE-2010-1437 SUSE:SUSE-SA:2010:031  View
480475 44021 CVE-2010-1437 URL:http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html  View
480476 44021 CVE-2010-1437 BID:39719  View
480477 44021 CVE-2010-1437 URL:http://www.securityfocus.com/bid/39719  View
480478 44021 CVE-2010-1437 OVAL:oval:org.mitre.oval:def:9715  View
480479 44021 CVE-2010-1437 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9715  View
480480 44021 CVE-2010-1437 SECUNIA:39830  View
480481 44021 CVE-2010-1437 URL:http://secunia.com/advisories/39830  View
480482 44021 CVE-2010-1437 SECUNIA:40218  View
480483 44021 CVE-2010-1437 URL:http://secunia.com/advisories/40218  View
480484 44021 CVE-2010-1437 SECUNIA:40645  View
480485 44021 CVE-2010-1437 URL:http://secunia.com/advisories/40645  View
480486 44021 CVE-2010-1437 SECUNIA:43315  View
480487 44021 CVE-2010-1437 URL:http://secunia.com/advisories/43315  View
480488 44021 CVE-2010-1437 VUPEN:ADV-2010-1857  View
480489 44021 CVE-2010-1437 URL:http://www.vupen.com/english/advisories/2010/1857  View
480490 44021 CVE-2010-1437 XF:kernel-findkeyringbyname-dos(58254)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39897 JVNDB-2010-005682 VideoLAN VLC media player におけるヒープベースのバッファオーバーフローの脆弱性 VideoLAN VLC media player には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2010-1441 44021 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005682.html  View