Lucene search
HistoryDec 06, 2010 - 8:12 p.m.
CVE-2010-3066
cve-2010-3066
linux kernel
denial of service
null pointer dereference
system call
4.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
4.9 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
The io_submit_one function in fs/aio.c in the Linux kernel before 2.6.23 allows local users to cause a denial of service (NULL pointer dereference) via a crafted io_submit system call with an IOCB_FLAG_RESFD flag.
Affected configurations
Node
linuxlinux_kernelRange≤2.6.22.19
ORlinuxlinux_kernelMatch2.6
ORlinuxlinux_kernelMatch2.6.0
ORlinuxlinux_kernelMatch2.6.1
ORlinuxlinux_kernelMatch2.6.2
ORlinuxlinux_kernelMatch2.6.10
ORlinuxlinux_kernelMatch2.6.11
ORlinuxlinux_kernelMatch2.6.11.1
ORlinuxlinux_kernelMatch2.6.11.2
ORlinuxlinux_kernelMatch2.6.11.3
ORlinuxlinux_kernelMatch2.6.11.4
ORlinuxlinux_kernelMatch2.6.11.5
ORlinuxlinux_kernelMatch2.6.11.6
ORlinuxlinux_kernelMatch2.6.11.7
ORlinuxlinux_kernelMatch2.6.11.8
ORlinuxlinux_kernelMatch2.6.11.9
ORlinuxlinux_kernelMatch2.6.11.10
ORlinuxlinux_kernelMatch2.6.11.11
ORlinuxlinux_kernelMatch2.6.11.12
ORlinuxlinux_kernelMatch2.6.12
ORlinuxlinux_kernelMatch2.6.12.1
ORlinuxlinux_kernelMatch2.6.12.2
ORlinuxlinux_kernelMatch2.6.12.3
ORlinuxlinux_kernelMatch2.6.12.4
ORlinuxlinux_kernelMatch2.6.12.5
ORlinuxlinux_kernelMatch2.6.12.6
ORlinuxlinux_kernelMatch2.6.13
ORlinuxlinux_kernelMatch2.6.13.1
ORlinuxlinux_kernelMatch2.6.13.2
ORlinuxlinux_kernelMatch2.6.13.3
ORlinuxlinux_kernelMatch2.6.13.4
ORlinuxlinux_kernelMatch2.6.13.5
ORlinuxlinux_kernelMatch2.6.14
ORlinuxlinux_kernelMatch2.6.14.1
ORlinuxlinux_kernelMatch2.6.14.2
ORlinuxlinux_kernelMatch2.6.14.3
ORlinuxlinux_kernelMatch2.6.14.4
ORlinuxlinux_kernelMatch2.6.14.5
ORlinuxlinux_kernelMatch2.6.14.6
ORlinuxlinux_kernelMatch2.6.14.7
ORlinuxlinux_kernelMatch2.6.15
ORlinuxlinux_kernelMatch2.6.15.1
ORlinuxlinux_kernelMatch2.6.15.2
ORlinuxlinux_kernelMatch2.6.15.3
ORlinuxlinux_kernelMatch2.6.15.4
ORlinuxlinux_kernelMatch2.6.15.5
ORlinuxlinux_kernelMatch2.6.15.6
ORlinuxlinux_kernelMatch2.6.15.7
ORlinuxlinux_kernelMatch2.6.16
ORlinuxlinux_kernelMatch2.6.16.1
ORlinuxlinux_kernelMatch2.6.16.2
ORlinuxlinux_kernelMatch2.6.16.3
ORlinuxlinux_kernelMatch2.6.16.4
ORlinuxlinux_kernelMatch2.6.16.5
ORlinuxlinux_kernelMatch2.6.16.6
ORlinuxlinux_kernelMatch2.6.16.7
ORlinuxlinux_kernelMatch2.6.16.8
ORlinuxlinux_kernelMatch2.6.16.9
ORlinuxlinux_kernelMatch2.6.16.10
ORlinuxlinux_kernelMatch2.6.16.11
ORlinuxlinux_kernelMatch2.6.16.12
ORlinuxlinux_kernelMatch2.6.16.13
ORlinuxlinux_kernelMatch2.6.16.14
ORlinuxlinux_kernelMatch2.6.16.15
ORlinuxlinux_kernelMatch2.6.16.16
ORlinuxlinux_kernelMatch2.6.16.17
ORlinuxlinux_kernelMatch2.6.16.18
ORlinuxlinux_kernelMatch2.6.16.19
ORlinuxlinux_kernelMatch2.6.16.20
ORlinuxlinux_kernelMatch2.6.16.21
ORlinuxlinux_kernelMatch2.6.16.22
ORlinuxlinux_kernelMatch2.6.16.23
ORlinuxlinux_kernelMatch2.6.16.24
ORlinuxlinux_kernelMatch2.6.16.25
ORlinuxlinux_kernelMatch2.6.16.26
ORlinuxlinux_kernelMatch2.6.16.27
ORlinuxlinux_kernelMatch2.6.16.28
ORlinuxlinux_kernelMatch2.6.16.29
ORlinuxlinux_kernelMatch2.6.16.30
ORlinuxlinux_kernelMatch2.6.16.31
ORlinuxlinux_kernelMatch2.6.16.32
ORlinuxlinux_kernelMatch2.6.16.33
ORlinuxlinux_kernelMatch2.6.16.34
ORlinuxlinux_kernelMatch2.6.16.35
ORlinuxlinux_kernelMatch2.6.16.36
ORlinuxlinux_kernelMatch2.6.16.37
ORlinuxlinux_kernelMatch2.6.16.38
ORlinuxlinux_kernelMatch2.6.16.39
ORlinuxlinux_kernelMatch2.6.16.40
ORlinuxlinux_kernelMatch2.6.16.41
ORlinuxlinux_kernelMatch2.6.16.42
ORlinuxlinux_kernelMatch2.6.16.43
ORlinuxlinux_kernelMatch2.6.16.44
ORlinuxlinux_kernelMatch2.6.16.45
ORlinuxlinux_kernelMatch2.6.16.46
ORlinuxlinux_kernelMatch2.6.16.47
ORlinuxlinux_kernelMatch2.6.16.48
ORlinuxlinux_kernelMatch2.6.16.49
ORlinuxlinux_kernelMatch2.6.16.50
ORlinuxlinux_kernelMatch2.6.16.51
ORlinuxlinux_kernelMatch2.6.16.52
ORlinuxlinux_kernelMatch2.6.16.53
ORlinuxlinux_kernelMatch2.6.16.54
ORlinuxlinux_kernelMatch2.6.16.55
ORlinuxlinux_kernelMatch2.6.16.56
ORlinuxlinux_kernelMatch2.6.16.57
ORlinuxlinux_kernelMatch2.6.16.58
ORlinuxlinux_kernelMatch2.6.16.59
ORlinuxlinux_kernelMatch2.6.16.60
ORlinuxlinux_kernelMatch2.6.16.61
ORlinuxlinux_kernelMatch2.6.16.62
ORlinuxlinux_kernelMatch2.6.17
ORlinuxlinux_kernelMatch2.6.17.1
ORlinuxlinux_kernelMatch2.6.17.2
ORlinuxlinux_kernelMatch2.6.17.3
ORlinuxlinux_kernelMatch2.6.17.4
ORlinuxlinux_kernelMatch2.6.17.5
ORlinuxlinux_kernelMatch2.6.17.6
ORlinuxlinux_kernelMatch2.6.17.7
ORlinuxlinux_kernelMatch2.6.17.8
ORlinuxlinux_kernelMatch2.6.17.9
ORlinuxlinux_kernelMatch2.6.17.10
ORlinuxlinux_kernelMatch2.6.17.11
ORlinuxlinux_kernelMatch2.6.17.12
ORlinuxlinux_kernelMatch2.6.17.13
ORlinuxlinux_kernelMatch2.6.17.14
ORlinuxlinux_kernelMatch2.6.18
ORlinuxlinux_kernelMatch2.6.18rc1
ORlinuxlinux_kernelMatch2.6.18rc2
ORlinuxlinux_kernelMatch2.6.18rc3
ORlinuxlinux_kernelMatch2.6.18rc4
ORlinuxlinux_kernelMatch2.6.18rc5
ORlinuxlinux_kernelMatch2.6.18rc6
ORlinuxlinux_kernelMatch2.6.18rc7
ORlinuxlinux_kernelMatch2.6.18.1
ORlinuxlinux_kernelMatch2.6.18.2
ORlinuxlinux_kernelMatch2.6.18.3
ORlinuxlinux_kernelMatch2.6.18.4
ORlinuxlinux_kernelMatch2.6.18.5
ORlinuxlinux_kernelMatch2.6.18.6
ORlinuxlinux_kernelMatch2.6.18.7
ORlinuxlinux_kernelMatch2.6.18.8
ORlinuxlinux_kernelMatch2.6.19
ORlinuxlinux_kernelMatch2.6.19.1
ORlinuxlinux_kernelMatch2.6.19.2
ORlinuxlinux_kernelMatch2.6.19.3
ORlinuxlinux_kernelMatch2.6.19.4
ORlinuxlinux_kernelMatch2.6.19.5
ORlinuxlinux_kernelMatch2.6.19.6
ORlinuxlinux_kernelMatch2.6.19.7
ORlinuxlinux_kernelMatch2.6.20
ORlinuxlinux_kernelMatch2.6.20.1
ORlinuxlinux_kernelMatch2.6.20.2
ORlinuxlinux_kernelMatch2.6.20.3
ORlinuxlinux_kernelMatch2.6.20.4
ORlinuxlinux_kernelMatch2.6.20.5
ORlinuxlinux_kernelMatch2.6.20.6
ORlinuxlinux_kernelMatch2.6.20.7
ORlinuxlinux_kernelMatch2.6.20.8
ORlinuxlinux_kernelMatch2.6.20.9
ORlinuxlinux_kernelMatch2.6.20.10
ORlinuxlinux_kernelMatch2.6.20.11
ORlinuxlinux_kernelMatch2.6.20.12
ORlinuxlinux_kernelMatch2.6.20.13
ORlinuxlinux_kernelMatch2.6.20.14
ORlinuxlinux_kernelMatch2.6.20.15
ORlinuxlinux_kernelMatch2.6.20.16
ORlinuxlinux_kernelMatch2.6.20.17
ORlinuxlinux_kernelMatch2.6.20.18
ORlinuxlinux_kernelMatch2.6.20.19
ORlinuxlinux_kernelMatch2.6.20.20
ORlinuxlinux_kernelMatch2.6.20.21
ORlinuxlinux_kernelMatch2.6.21
ORlinuxlinux_kernelMatch2.6.21.1
ORlinuxlinux_kernelMatch2.6.21.2
ORlinuxlinux_kernelMatch2.6.21.3
ORlinuxlinux_kernelMatch2.6.21.4
ORlinuxlinux_kernelMatch2.6.21.5
ORlinuxlinux_kernelMatch2.6.21.6
ORlinuxlinux_kernelMatch2.6.21.7
ORlinuxlinux_kernelMatch2.6.22
ORlinuxlinux_kernelMatch2.6.22.1
ORlinuxlinux_kernelMatch2.6.22.2
ORlinuxlinux_kernelMatch2.6.22.3
ORlinuxlinux_kernelMatch2.6.22.4
ORlinuxlinux_kernelMatch2.6.22.5
ORlinuxlinux_kernelMatch2.6.22.6
ORlinuxlinux_kernelMatch2.6.22.7
ORlinuxlinux_kernelMatch2.6.22.8
ORlinuxlinux_kernelMatch2.6.22.9
ORlinuxlinux_kernelMatch2.6.22.10
ORlinuxlinux_kernelMatch2.6.22.11
ORlinuxlinux_kernelMatch2.6.22.12
ORlinuxlinux_kernelMatch2.6.22.13
ORlinuxlinux_kernelMatch2.6.22.14
ORlinuxlinux_kernelMatch2.6.22.15
ORlinuxlinux_kernelMatch2.6.22.16
ORlinuxlinux_kernelMatch2.6.22.17
ORlinuxlinux_kernelMatch2.6.22.18
References
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=87e2831c3fa39cbf6f7ab676bb5aef039b9659e2
secunia.com/advisories/46397
securitytracker.com/id?1024708
www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23
www.redhat.com/support/errata/RHSA-2010-0839.html
www.securityfocus.com/archive/1/520102/100/0/threaded
www.vmware.com/security/advisories/VMSA-2011-0012.html
bugzilla.redhat.com/show_bug.cgi?id=631716
Social References
More
Related
cvelist
cvelist
CVE-2010-3066
2010-12-06 20:00:00
nvd
nvd
CVE-2010-3066
2010-12-06 20:12:59
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:48:21
ubuntucve
ubuntucve
CVE-2010-3066
2010-12-06 00:00:00
prion
prion
Null pointer dereference
2010-12-06 20:12:00
nessus
nessus
Scientific Linux Security Update : kernel on SL5.x i386/x86_64
2012-08-01 00:00:00
CentOS 5 : kernel (CESA-2010:0839)
2010-11-24 00:00:00
RHEL 5 : kernel (RHSA-2010:0839)
2010-11-10 00:00:00
openvas
openvas
RedHat Update for kernel RHSA-2010:0839-01
2010-11-16 00:00:00
CentOS Update for kernel CESA-2010:0839 centos5 i386
2011-08-09 00:00:00
CentOS Update for kernel CESA-2010:0839 centos5 i386
2011-08-09 00:00:00
centos
centos
kernel security update
2010-11-09 22:40:43
redhat
redhat
(RHSA-2010:0839) Moderate: kernel security and bug fix update
2010-11-09 00:00:00
oraclelinux
oraclelinux
kernel security and bug fix update
2010-11-09 00:00:00
Oracle Linux 5.6 kernel security and bug fix update
2011-01-20 00:00:00
vmware
vmware
VMware ESX third party updates for Service Console packages glibc and dhcp
2011-10-12 00:00:00
VMware ESXi and ESX updates to third party libraries and ESX Service Console
2011-10-12 00:00:00
4.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
4.9 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2010-3066