Lucene search
HistoryOct 03, 2022 - 4:21 p.m.
CVE-2010-2693
cve-2010-2693
freebsd
mbuf buffer
denial of service
system file corruption
sendfile system call
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
13.1%
FreeBSD 7.1 through 8.1-PRERELEASE does not copy the read-only flag when creating a duplicate mbuf buffer reference, which allows local users to cause a denial of service (system file corruption) and gain privileges via the sendfile system call.
Affected configurations
Node
freebsdfreebsdMatch7.1
ORfreebsdfreebsdMatch7.1pre-release
ORfreebsdfreebsdMatch7.1rc1
ORfreebsdfreebsdMatch7.1release-p1
ORfreebsdfreebsdMatch7.1release-p2
ORfreebsdfreebsdMatch7.1release-p4
ORfreebsdfreebsdMatch7.1release-p5
ORfreebsdfreebsdMatch7.1release-p6
ORfreebsdfreebsdMatch7.2
ORfreebsdfreebsdMatch7.2pre-release
ORfreebsdfreebsdMatch7.2stable
ORfreebsdfreebsdMatch7.3
ORfreebsdfreebsdMatch8.0
ORfreebsdfreebsdMatch8.1pre-release
| CPE | Name | Operator | Version |
|---|---|---|---|
| freebsd:freebsd | freebsd | eq | 7.1 |
| freebsd:freebsd | freebsd | eq | 7.2 |
| freebsd:freebsd | freebsd | eq | 7.3 |
| freebsd:freebsd | freebsd | eq | 8.0 |
| freebsd:freebsd | freebsd | eq | 8.1 |
Related
ubuntucve
ubuntucve
CVE-2010-2693
2010-07-13 00:00:00
seebug
seebug
FreeBSD mbuf本地权限提升漏洞
2010-07-20 00:00:00
nvd
nvd
CVE-2010-2693
2010-07-13 20:30:12
securityvulns
securityvulns
FreeBSD privilege escalation
2010-07-14 00:00:00
FreeBSD Security Advisory FreeBSD-SA-10:07.mbuf
2010-07-14 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-10:07.mbuf
2010-07-13 00:00:00
cvelist
cvelist
CVE-2010-2693
2022-10-03 16:21:08
openvas
openvas
FreeBSD Security Advisory (FreeBSD-SA-10:07.mbuf.asc)
2010-07-22 00:00:00
FreeBSD Security Advisory (FreeBSD-SA-10:07.mbuf.asc)
2010-07-22 00:00:00
prion
prion
Memory corruption
2010-07-13 20:30:00
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
13.1%
Related for CVE-2010-2693