NVD

Id
13709  
Name
CVE-2010-2226  
Description
The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux kernel before 2.6.35 does not properly check the file descriptors passed to the SWAPEXT ioctl, which allows local users to leverage write access and obtain read access by swapping one file into another file.  
Reject
 
CVSS Version
2  
CVSS Score
1.9  
Severity
Low  
CVSS Base Score
1.9  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2010-09-03  
Modified Date
2012-03-19  
Seq
2010-2226  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
76137 13709 CVE-2010-2226 [xfs] 20100616 Re: [Security] XFS swapext ioctl minor security issues  View
76138 13709 CVE-2010-2226 [xfs] 20100616 Re: [Security] XFS swapext ioctl minor security issues  View
76139 13709 CVE-2010-2226 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=1817176a86352f65210139d4c794ad2d19fc6b63  View
76140 13709 CVE-2010-2226 SUSE-SA:2010:060  View
76141 13709 CVE-2010-2226 SUSE-SA:2011:007  View
76142 13709 CVE-2010-2226 [oss-security] 20100617 CVE request - kernel: xfs swapext ioctl issue  View
76143 13709 CVE-2010-2226 [oss-security] 20100618 Re: CVE request - kernel: xfs swapext ioctl issue  View
76144 13709 CVE-2010-2226 DSA-2094  View
76145 13709 CVE-2010-2226 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35  View
76146 13709 CVE-2010-2226 MDVSA-2010:198  View
76147 13709 CVE-2010-2226 RHSA-2010:0610  View
76148 13709 CVE-2010-2226 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX  View
76149 13709 CVE-2010-2226 40920  View
76150 13709 CVE-2010-2226 USN-1000-1  View
76151 13709 CVE-2010-2226 http://www.vmware.com/security/advisories/VMSA-2011-0003.html  View
76152 13709 CVE-2010-2226 ADV-2011-0298  View
76153 13709 CVE-2010-2226 https://bugzilla.redhat.com/show_bug.cgi?id=605158  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36225 JVNDB-2010-002005 Linux kernel の xfs_swapext 関数における読み込み権限を取得される脆弱性 Linux kernel の fs/xfs/xfs_dfrag.c 内にある xfs_swapext 関数には、SWAPEXT ioctl へ渡されるファイルの記述子を適切にチェックしないため、書き込み権限を利用される、または読み込み権限を取得される脆弱性が存在します。 CVE-2010-2226 44806 CVE-2010-2226 13709 1.9 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002005.html 2010-08-01 2011-03-03 View