NVD

Id
12273  
Name
CVE-2010-0727  
Description
The gfs2_lock function in the Linux kernel before 2.6.34-rc1-next-20100312, and the gfs_lock function in the Linux kernel on Red Hat Enterprise Linux (RHEL) 5 and 6, does not properly remove POSIX locks on files that are setgid without group-execute permission, which allows local users to cause a denial of service (BUG and system crash) by locking a file on a (1) GFS or (2) GFS2 filesystem, and then changing this file"s permissions.  
Reject
 
CVSS Version
2  
CVSS Score
4.7  
Severity
Medium  
CVSS Base Score
4.7  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-18  
Published
2010-03-16  
Modified Date
2012-03-19  
Seq
2010-0727  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
67504 12273 CVE-2010-0727 [linux-kernel] 20100311 [PATCH 3/3] GFS2: Skip check for mandatory locks when unlocking  View
67505 12273 CVE-2010-0727 oval:org.mitre.oval:def:11392  View
67506 12273 CVE-2010-0727 1023809  View
67507 12273 CVE-2010-0727 DSA-2053  View
67508 12273 CVE-2010-0727 http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.34-rc1-next-20100312.bz2  View
67509 12273 CVE-2010-0727 MDVSA-2010:066  View
67510 12273 CVE-2010-0727 [oss-security] 20100312 CVE-2010-0727 kernel: gfs/gfs2 locking code DoS flaw  View
67511 12273 CVE-2010-0727 RHSA-2010:0330  View
67512 12273 CVE-2010-0727 RHSA-2010:0380  View
67513 12273 CVE-2010-0727 RHSA-2010:0521  View
67514 12273 CVE-2010-0727 https://bugzilla.redhat.com/show_bug.cgi?id=570863  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35521 JVNDB-2010-001301 Linux Kernel の gfs2_lock または gfs_lock 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の gfs2_lock 関数、または gfs_lock 関数には、グループ実行許可がない setgid のファイル上における POSIX ロックの解除の処理に不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-0727 43307 CVE-2010-0727 12273 4.7 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001301.html 2010-03-16 2010-07-20 View