Lucene search
HistorySep 07, 2010 - 5:00 p.m.
CVE-2010-2248
cifs
linux
kernel
denial of service
smb
remote attackers
cve-2010-2248
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
7 High
AI Score
Confidence
High
0.232 Low
EPSS
Percentile
96.6%
fs/cifs/cifssmb.c in the CIFS implementation in the Linux kernel before 2.6.34-rc4 allows remote attackers to cause a denial of service (panic) via an SMB response packet with an invalid CountHigh value, as demonstrated by a response from an OS/2 server, related to the CIFSSMBWrite and CIFSSMBWrite2 functions.
Affected configurations
Node
linuxlinux_kernelRange≤2.6.34rc3
ORlinuxlinux_kernelMatch2.6.0
ORlinuxlinux_kernelMatch2.6.1
ORlinuxlinux_kernelMatch2.6.2
ORlinuxlinux_kernelMatch2.6.3
ORlinuxlinux_kernelMatch2.6.4
ORlinuxlinux_kernelMatch2.6.5
ORlinuxlinux_kernelMatch2.6.6
ORlinuxlinux_kernelMatch2.6.7
ORlinuxlinux_kernelMatch2.6.8
ORlinuxlinux_kernelMatch2.6.8.1
ORlinuxlinux_kernelMatch2.6.9
ORlinuxlinux_kernelMatch2.6.10
ORlinuxlinux_kernelMatch2.6.11
ORlinuxlinux_kernelMatch2.6.11.1
ORlinuxlinux_kernelMatch2.6.11.2
ORlinuxlinux_kernelMatch2.6.11.3
ORlinuxlinux_kernelMatch2.6.11.4
ORlinuxlinux_kernelMatch2.6.11.5
ORlinuxlinux_kernelMatch2.6.11.6
ORlinuxlinux_kernelMatch2.6.11.7
ORlinuxlinux_kernelMatch2.6.11.8
ORlinuxlinux_kernelMatch2.6.11.9
ORlinuxlinux_kernelMatch2.6.11.10
ORlinuxlinux_kernelMatch2.6.11.11
ORlinuxlinux_kernelMatch2.6.11.12
ORlinuxlinux_kernelMatch2.6.12
ORlinuxlinux_kernelMatch2.6.12.1
ORlinuxlinux_kernelMatch2.6.12.2
ORlinuxlinux_kernelMatch2.6.12.3
ORlinuxlinux_kernelMatch2.6.12.4
ORlinuxlinux_kernelMatch2.6.12.5
ORlinuxlinux_kernelMatch2.6.12.6
ORlinuxlinux_kernelMatch2.6.13
ORlinuxlinux_kernelMatch2.6.13.1
ORlinuxlinux_kernelMatch2.6.13.2
ORlinuxlinux_kernelMatch2.6.13.3
ORlinuxlinux_kernelMatch2.6.13.4
ORlinuxlinux_kernelMatch2.6.13.5
ORlinuxlinux_kernelMatch2.6.14
ORlinuxlinux_kernelMatch2.6.14.1
ORlinuxlinux_kernelMatch2.6.14.3
ORlinuxlinux_kernelMatch2.6.14.4
ORlinuxlinux_kernelMatch2.6.14.5
ORlinuxlinux_kernelMatch2.6.14.6
ORlinuxlinux_kernelMatch2.6.14.7
ORlinuxlinux_kernelMatch2.6.15
ORlinuxlinux_kernelMatch2.6.15.1
ORlinuxlinux_kernelMatch2.6.15.2
ORlinuxlinux_kernelMatch2.6.15.3
ORlinuxlinux_kernelMatch2.6.15.4
ORlinuxlinux_kernelMatch2.6.15.5
ORlinuxlinux_kernelMatch2.6.15.6
ORlinuxlinux_kernelMatch2.6.15.7
ORlinuxlinux_kernelMatch2.6.16
ORlinuxlinux_kernelMatch2.6.16.1
ORlinuxlinux_kernelMatch2.6.16.2
ORlinuxlinux_kernelMatch2.6.16.3
ORlinuxlinux_kernelMatch2.6.16.4
ORlinuxlinux_kernelMatch2.6.16.5
ORlinuxlinux_kernelMatch2.6.16.6
ORlinuxlinux_kernelMatch2.6.16.7
ORlinuxlinux_kernelMatch2.6.16.8
ORlinuxlinux_kernelMatch2.6.16.9
ORlinuxlinux_kernelMatch2.6.16.10
ORlinuxlinux_kernelMatch2.6.16.11
ORlinuxlinux_kernelMatch2.6.16.12
ORlinuxlinux_kernelMatch2.6.16.13
ORlinuxlinux_kernelMatch2.6.16.14
ORlinuxlinux_kernelMatch2.6.16.15
ORlinuxlinux_kernelMatch2.6.16.16
ORlinuxlinux_kernelMatch2.6.16.17
ORlinuxlinux_kernelMatch2.6.16.18
ORlinuxlinux_kernelMatch2.6.16.19
ORlinuxlinux_kernelMatch2.6.16.20
ORlinuxlinux_kernelMatch2.6.16.21
ORlinuxlinux_kernelMatch2.6.16.22
ORlinuxlinux_kernelMatch2.6.16.23
ORlinuxlinux_kernelMatch2.6.16.24
ORlinuxlinux_kernelMatch2.6.16.25
ORlinuxlinux_kernelMatch2.6.16.26
ORlinuxlinux_kernelMatch2.6.16.27
ORlinuxlinux_kernelMatch2.6.16.28
ORlinuxlinux_kernelMatch2.6.16.29
ORlinuxlinux_kernelMatch2.6.16.30
ORlinuxlinux_kernelMatch2.6.16.31
ORlinuxlinux_kernelMatch2.6.17
ORlinuxlinux_kernelMatch2.6.17.1
ORlinuxlinux_kernelMatch2.6.17.2
ORlinuxlinux_kernelMatch2.6.17.3
ORlinuxlinux_kernelMatch2.6.17.4
ORlinuxlinux_kernelMatch2.6.17.5
ORlinuxlinux_kernelMatch2.6.17.6
ORlinuxlinux_kernelMatch2.6.17.7
ORlinuxlinux_kernelMatch2.6.17.8
ORlinuxlinux_kernelMatch2.6.17.9
ORlinuxlinux_kernelMatch2.6.17.10
ORlinuxlinux_kernelMatch2.6.17.11
ORlinuxlinux_kernelMatch2.6.17.12
ORlinuxlinux_kernelMatch2.6.17.13
ORlinuxlinux_kernelMatch2.6.17.14
ORlinuxlinux_kernelMatch2.6.18.1
ORlinuxlinux_kernelMatch2.6.18.2
ORlinuxlinux_kernelMatch2.6.18.3
ORlinuxlinux_kernelMatch2.6.18.4
ORlinuxlinux_kernelMatch2.6.18.5
ORlinuxlinux_kernelMatch2.6.18.6
ORlinuxlinux_kernelMatch2.6.18.7
ORlinuxlinux_kernelMatch2.6.18.8
ORlinuxlinux_kernelMatch2.6.22
ORlinuxlinux_kernelMatch2.6.22.2
ORlinuxlinux_kernelMatch2.6.22.3
ORlinuxlinux_kernelMatch2.6.22.4
ORlinuxlinux_kernelMatch2.6.22.5
ORlinuxlinux_kernelMatch2.6.22.6
ORlinuxlinux_kernelMatch2.6.22.7
ORlinuxlinux_kernelMatch2.6.23
ORlinuxlinux_kernelMatch2.6.23rc1
ORlinuxlinux_kernelMatch2.6.23rc2
ORlinuxlinux_kernelMatch2.6.23.1
ORlinuxlinux_kernelMatch2.6.23.2
ORlinuxlinux_kernelMatch2.6.23.3
ORlinuxlinux_kernelMatch2.6.23.4
ORlinuxlinux_kernelMatch2.6.23.5
ORlinuxlinux_kernelMatch2.6.23.6
ORlinuxlinux_kernelMatch2.6.23.7
ORlinuxlinux_kernelMatch2.6.24rc1
ORlinuxlinux_kernelMatch2.6.24rc2
ORlinuxlinux_kernelMatch2.6.24rc3
ORlinuxlinux_kernelMatch2.6.24rc4
ORlinuxlinux_kernelMatch2.6.24rc5
ORlinuxlinux_kernelMatch2.6.32
ORlinuxlinux_kernelMatch2.6.32.1
ORlinuxlinux_kernelMatch2.6.32.2
ORlinuxlinux_kernelMatch2.6.32.3
ORlinuxlinux_kernelMatch2.6.32.4
ORlinuxlinux_kernelMatch2.6.33
ORlinuxlinux_kernelMatch2.6.33rc1
ORlinuxlinux_kernelMatch2.6.33rc2
ORlinuxlinux_kernelMatch2.6.33rc3
ORlinuxlinux_kernelMatch2.6.33rc4
ORlinuxlinux_kernelMatch2.6.33rc5
ORlinuxlinux_kernelMatch2.6.33rc6
ORlinuxlinux_kernelMatch2.6.33.1
ORlinuxlinux_kernelMatch2.6.33.2
ORlinuxlinux_kernelMatch2.6.34rc1
ORlinuxlinux_kernelMatch2.6.34rc2
References
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6513a81e9325d712f1bfb9a1d7b750134e49ff18
lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html
secunia.com/advisories/43315
securitytracker.com/id?1024285
www.debian.org/security/2010/dsa-2094
www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.34/ChangeLog-2.6.34-rc4
www.mandriva.com/security/advisories?name=MDVSA-2010:198
www.mandriva.com/security/advisories?name=MDVSA-2011:051
www.openwall.com/lists/oss-security/2010/06/28/1
www.openwall.com/lists/oss-security/2010/06/28/6
www.redhat.com/support/errata/RHSA-2010-0610.html
www.securityfocus.com/archive/1/516397/100/0/threaded
www.securityfocus.com/bid/42242
www.ubuntu.com/usn/USN-1000-1
www.vmware.com/security/advisories/VMSA-2011-0003.html
bugzilla.redhat.com/show_bug.cgi?id=608583
rhn.redhat.com/errata/RHSA-2010-0606.html
Social References
More
Related
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:46:34
nvd
nvd
CVE-2010-2248
2010-09-07 17:00:01
ubuntucve
ubuntucve
CVE-2010-2248
2010-09-07 00:00:00
seebug
seebug
Linux Kernel CIFS实现CIFSSMBWrite()函数拒绝服务漏洞
2010-08-10 00:00:00
prion
prion
Design/Logic Flaw
2010-09-07 17:00:00
cvelist
cvelist
CVE-2010-2248
2010-09-07 16:30:00
nessus
nessus
Oracle Linux 4 : kernel (ELSA-2010-0606)
2013-07-12 00:00:00
CentOS 4 : kernel (CESA-2010:0606)
2010-08-29 00:00:00
Scientific Linux Security Update : kernel on SL4.x i386/x86_64
2012-08-01 00:00:00
openvas
openvas
RedHat Update for kernel RHSA-2010:0606-01
2010-08-06 00:00:00
RedHat Update for kernel RHSA-2010:0606-01
2010-08-06 00:00:00
CentOS Update for kernel CESA-2010:0606 centos4 i386
2010-08-30 00:00:00
redhat
redhat
(RHSA-2010:0606) Important: kernel security and bug fix update
2010-08-05 00:00:00
(RHSA-2010:0610) Important: kernel security and bug fix update
2010-08-10 00:00:00
(RHSA-2010:0631) Important: kernel-rt security and bug fix update
2010-08-17 00:00:00
centos
centos
kernel security update
2010-08-27 15:07:34
kernel security update
2010-08-11 12:16:13
oraclelinux
oraclelinux
kernel security and bug fix update
2010-08-05 00:00:00
kernel security and bug fix update
2010-08-10 00:00:00
Oracle Linux 5.6 kernel security and bug fix update
2011-01-20 00:00:00
osv
osv
linux-2.6 - several issues
2010-08-19 00:00:00
debian
debian
[SECURITY] [DSA 2094-1] New Linux 2.6.26 packages fix several issues
2010-08-20 01:48:11
suse
suse
remote denial of service in kernel
2010-12-14 13:42:46
local privilege escalation in kernel
2010-09-23 16:37:26
ubuntu
ubuntu
Linux kernel vulnerabilities
2010-10-19 00:00:00
Linux kernel vulnerabilities
2011-02-28 00:00:00
Linux kernel vulnerabilities
2011-02-25 00:00:00
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
7 High
AI Score
Confidence
High
0.232 Low
EPSS
Percentile
96.6%
Related for CVE-2010-2248