NVD

Id
14445  
Name
CVE-2010-3015  
Description
Integer overflow in the ext4_ext_get_blocks function in fs/ext4/extents.c in the Linux kernel before 2.6.34 allows local users to cause a denial of service (BUG and system crash) via a write operation on the last block of a large file, followed by a sync operation.  
Reject
 
CVSS Version
2  
CVSS Score
4.7  
Severity
Medium  
CVSS Base Score
4.7  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-18  
Published
2010-08-20  
Modified Date
2012-03-19  
Seq
2010-3015  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
79922 14445 CVE-2010-3015 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=731eb1a03a8445cde2cb23ecfb3580c6fa7bb690  View
79923 14445 CVE-2010-3015 SUSE-SA:2010:040  View
79924 14445 CVE-2010-3015 SUSE-SA:2010:054  View
79925 14445 CVE-2010-3015 SUSE-SA:2011:007  View
79926 14445 CVE-2010-3015 [oss-security] 20100816 CVE request - kernel: integer overflow in ext4_ext_get_blocks()  View
79927 14445 CVE-2010-3015 [oss-security] 20100816 Re: CVE request - kernel: integer overflow in ext4_ext_get_blocks()  View
79928 14445 CVE-2010-3015 [oss-security] 20100817 Re: CVE request - kernel: integer overflow in ext4_ext_get_blocks()  View
79929 14445 CVE-2010-3015 http://support.avaya.com/css/P8/documents/100113326  View
79930 14445 CVE-2010-3015 DSA-2094  View
79931 14445 CVE-2010-3015 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34  View
79932 14445 CVE-2010-3015 MDVSA-2010:172  View
79933 14445 CVE-2010-3015 MDVSA-2010:247  View
79934 14445 CVE-2010-3015 MDVSA-2011:029  View
79935 14445 CVE-2010-3015 RHSA-2010:0723  View
79936 14445 CVE-2010-3015 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console  View
79937 14445 CVE-2010-3015 42477  View
79938 14445 CVE-2010-3015 USN-1000-1  View
79939 14445 CVE-2010-3015 http://www.vmware.com/security/advisories/VMSA-2011-0012.html  View
79940 14445 CVE-2010-3015 ADV-2010-3117  View
79941 14445 CVE-2010-3015 ADV-2011-0298  View
79942 14445 CVE-2010-3015 kernel-stacksize-dos(61156)  View
79943 14445 CVE-2010-3015 https://bugzilla.redhat.com/show_bug.cgi?id=624327  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36356 JVNDB-2010-002136 Linux kernel の ext4_ext_get_blocks 関数における整数オーバーフローの脆弱性 Linux kernel の fs/ext4/extents.c 内にある ext4_ext_get_blocks 関数には、同期処理に続く、大容量ファイルの最終ブロックへの書き込み操作に不備があるため、整数オーバーフローの脆弱性が存在します。 CVE-2010-3015 45595 CVE-2010-3015 14445 4.7 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002136.html 2010-08-20 2012-12-26 View