Lucene search

RedhatCVE-2010-2530

HistorySep 29, 2010 - 5:00 p.m.

CVE-2010-2530

2010-09-2917:00:04

CWE-189

redhat

web.nvd.nist.gov

cve-2010-2530

integer signedness errors

smb_subr.c

denial of service

nvd

netbsd

freebsd

apple

mac os x

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.1

Confidence

Low

EPSS

Percentile

5.1%

JSON

Multiple integer signedness errors in smb_subr.c in the netsmb module in the kernel in NetBSD 5.0.2 and earlier, FreeBSD, and Apple Mac OS X allow local users to cause a denial of service (panic) via a negative size value in a /dev/nsmb ioctl operation, as demonstrated by a (1) SMBIOC_LOOKUP or (2) SMBIOC_OPENSESSION ioctl call.

Affected configurations

Nvd

Node

netbsdnetbsdRange≤5.0.2

netbsdnetbsdMatch0.8

netbsdnetbsdMatch0.9

netbsdnetbsdMatch1.0

netbsdnetbsdMatch1.1

netbsdnetbsdMatch1.2

netbsdnetbsdMatch1.2.1

netbsdnetbsdMatch1.3

netbsdnetbsdMatch1.3.1

netbsdnetbsdMatch1.3.2

netbsdnetbsdMatch1.3.3

netbsdnetbsdMatch1.4

netbsdnetbsdMatch1.4.1

netbsdnetbsdMatch1.4.2

netbsdnetbsdMatch1.4.3

netbsdnetbsdMatch1.5

netbsdnetbsdMatch1.5.1

netbsdnetbsdMatch1.5.2

netbsdnetbsdMatch1.5.3

netbsdnetbsdMatch1.6

netbsdnetbsdMatch1.6beta

netbsdnetbsdMatch1.6.1

netbsdnetbsdMatch1.6.2

netbsdnetbsdMatch2.0

netbsdnetbsdMatch2.0.1

netbsdnetbsdMatch2.0.2

netbsdnetbsdMatch2.0.3

netbsdnetbsdMatch2.0.4

netbsdnetbsdMatch2.1

netbsdnetbsdMatch2.1.1

netbsdnetbsdMatch3.0

netbsdnetbsdMatch3.0.1

netbsdnetbsdMatch3.0.2

netbsdnetbsdMatch3.1

netbsdnetbsdMatch3.99.15

netbsdnetbsdMatch4.0beta

netbsdnetbsdMatch4.0beta2

netbsdnetbsdMatch4.0.1

netbsdnetbsdMatch5.0

netbsdnetbsdMatch5.0.1

Node

applemac_os_x

freebsdfreebsd

VendorProductVersionCPE
netbsdnetbsd*cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:*
netbsdnetbsd0.8cpe:2.3:o:netbsd:netbsd:0.8:*:*:*:*:*:*:*
netbsdnetbsd0.9cpe:2.3:o:netbsd:netbsd:0.9:*:*:*:*:*:*:*
netbsdnetbsd1.0cpe:2.3:o:netbsd:netbsd:1.0:*:*:*:*:*:*:*
netbsdnetbsd1.1cpe:2.3:o:netbsd:netbsd:1.1:*:*:*:*:*:*:*
netbsdnetbsd1.2cpe:2.3:o:netbsd:netbsd:1.2:*:*:*:*:*:*:*
netbsdnetbsd1.2.1cpe:2.3:o:netbsd:netbsd:1.2.1:*:*:*:*:*:*:*
netbsdnetbsd1.3cpe:2.3:o:netbsd:netbsd:1.3:*:*:*:*:*:*:*
netbsdnetbsd1.3.1cpe:2.3:o:netbsd:netbsd:1.3.1:*:*:*:*:*:*:*
netbsdnetbsd1.3.2cpe:2.3:o:netbsd:netbsd:1.3.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
netbsd	netbsd	*	cpe:2.3:o:netbsd:netbsd::::::::
netbsd	netbsd	0.8	cpe:2.3:o:netbsd:netbsd:0.8:::::::*
netbsd	netbsd	0.9	cpe:2.3:o:netbsd:netbsd:0.9:::::::*
netbsd	netbsd	1.0	cpe:2.3:o:netbsd:netbsd:1.0:::::::*
netbsd	netbsd	1.1	cpe:2.3:o:netbsd:netbsd:1.1:::::::*
netbsd	netbsd	1.2	cpe:2.3:o:netbsd:netbsd:1.2:::::::*
netbsd	netbsd	1.2.1	cpe:2.3:o:netbsd:netbsd:1.2.1:::::::*
netbsd	netbsd	1.3	cpe:2.3:o:netbsd:netbsd:1.3:::::::*
netbsd	netbsd	1.3.1	cpe:2.3:o:netbsd:netbsd:1.3.1:::::::*
netbsd	netbsd	1.3.2	cpe:2.3:o:netbsd:netbsd:1.3.2:::::::*

Rows per page:

1-10 of 421

References

cvsweb.netbsd.org/bsdweb.cgi/src/sys/netsmb/smb_subr.c.diff?r1=1.34&r2=1.35&only_with_tag=MAIN&f=h

www.openwall.com/lists/oss-security/2010/07/12/6

www.openwall.com/lists/oss-security/2010/07/16/2

www.securityfocus.com/bid/41557

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.1

Confidence

Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2010-2530