NVD

Id
13162  
Name
CVE-2010-1643  
Description
mm/shmem.c in the Linux kernel before 2.6.28-rc3, when strict overcommit is enabled, does not properly handle the export of shmemfs objects by knfsd, which allows attackers to cause a denial of service (NULL pointer dereference and knfsd crash) or possibly have unspecified other impact via unknown vectors.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-06-03  
Modified Date
2012-03-19  
Seq
2010-1643  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
72729 13162 CVE-2010-1643 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=731572d39fcd3498702eda4600db4c43d51e0b26  View
72730 13162 CVE-2010-1643 SUSE-SA:2010:031  View
72731 13162 CVE-2010-1643 http://vigilance.fr/vulnerability/Linux-kernel-denial-of-service-via-knfsd-9666  View
72732 13162 CVE-2010-1643 http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.28/ChangeLog-2.6.28-rc3  View
72733 13162 CVE-2010-1643 MDVSA-2010:198  View
72734 13162 CVE-2010-1643 [oss-security] 20100526 CVE request - kernel: nfsd: fix vm overcommit crash  View
72735 13162 CVE-2010-1643 [oss-security] 20100526 Re: CVE request - kernel: nfsd: fix vm overcommit crash  View
72736 13162 CVE-2010-1643 40377  View
72737 13162 CVE-2010-1643 ADV-2010-1857  View
72738 13162 CVE-2010-1643 linux-kernel-knfsd-dos(58957)  View
72739 13162 CVE-2010-1643 https://bugzilla.redhat.com/show_bug.cgi?id=595970  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49950 JVNDB-2008-005260 Linux kernel の mm/shmem.c におけるサービス運用妨害 (DoS) の脆弱性 Linux kernel の mm/shmem.c は、strict overcommit が有効になっている際、knfsd によって shmemfs オブジェクトの外部出力を適切に処理しないため、サービス運用妨害 (NULL ポインタデリファレンスおよび knfsd クラッシュ) 状態となるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2010-1643 44223 CVE-2010-1643 13162 6.9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005260.html 2008-10-28 2012-09-25 View