NVD

Id
14374  
Name
CVE-2010-2943  
Description
The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read or overwrite disk blocks that are currently assigned to an active file but were previously assigned to an unlinked file, by accessing a stale NFS filehandle.  
Reject
 
CVSS Version
2  
CVSS Score
7.9  
Severity
High  
CVSS Base Score
7.9  
CVSS Impact Subscore
9.2  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:C/I:C/A:N)  
Pub Date
2017-01-18  
Published
2010-09-30  
Modified Date
2012-03-19  
Seq
2010-2943  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
79522 14374 CVE-2010-2943 [linux-xfs] 20100620 [PATCH 0/4, V2] xfs: validate inode numbers in file handles correctly  View
79523 14374 CVE-2010-2943 [linux-xfs] 20100620 [PATCH 3/4] xfs: rename XFS_IGET_BULKSTAT to XFS_IGET_UNTRUSTED  View
79524 14374 CVE-2010-2943 [linux-xfs] 20100620 [PATCH 4/4] xfs: remove block number from inode lookup code  View
79525 14374 CVE-2010-2943 [linux-xfs] 20100620 [PATCH 2/4] xfs: validate untrusted inode numbers during lookup  View
79526 14374 CVE-2010-2943 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=1920779e67cbf5ea8afef317777c5bf2b8096188  View
79527 14374 CVE-2010-2943 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=7124fe0a5b619d65b739477b3b55a20bf805b06d  View
79528 14374 CVE-2010-2943 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=7b6259e7a83647948fa33a736cc832310c8d85aa  View
79529 14374 CVE-2010-2943 [xfs] 20100617 [PATCH] xfsqa: test open_by_handle() on unlinked and freed inode clusters V2  View
79530 14374 CVE-2010-2943 [xfs] 20100618 Re: [PATCH] xfsqa: test open_by_handle() on unlinked and freed inode clusters V2  View
79531 14374 CVE-2010-2943 http://support.avaya.com/css/P8/documents/100113326  View
79532 14374 CVE-2010-2943 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35  View
79533 14374 CVE-2010-2943 [oss-security] 20100818 CVE request - kernel: xfs: stale data exposure  View
79534 14374 CVE-2010-2943 [oss-security] 20100819 Re: CVE request - kernel: xfs: stale data exposure  View
79535 14374 CVE-2010-2943 RHSA-2010:0723  View
79536 14374 CVE-2010-2943 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console  View
79537 14374 CVE-2010-2943 42527  View
79538 14374 CVE-2010-2943 USN-1041-1  View
79539 14374 CVE-2010-2943 USN-1057-1  View
79540 14374 CVE-2010-2943 http://www.vmware.com/security/advisories/VMSA-2011-0012.html  View
79541 14374 CVE-2010-2943 ADV-2011-0070  View
79542 14374 CVE-2010-2943 ADV-2011-0280  View
79543 14374 CVE-2010-2943 https://bugzilla.redhat.com/show_bug.cgi?id=624923  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36355 JVNDB-2010-002135 Linux kernel の xfs 実装におけるリンクが無効に設定されているファイルを読まれる脆弱性 Linux kernel の xfs 実装は、inode バッファを読み込む前に、inode が配置された brees を検索しないため、リンクが無効に設定されているファイルやディスクブロックを有効なファイルとして読まれる、または上書きされる脆弱性が存在します。 CVE-2010-2943 45523 CVE-2010-2943 14374 7.9 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002135.html 2010-09-20 2012-12-26 View