Lucene search

K
cve[email protected]CVE-2010-4157
HistoryDec 10, 2010 - 7:00 p.m.

CVE-2010-4157

2010-12-1019:00:05
CWE-190
web.nvd.nist.gov
64
4
cve-2010-4157
integer overflow
linux kernel
memory corruption
denial of service
nvd
security vulnerability

6.2 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.2%

Integer overflow in the ioc_general function in drivers/scsi/gdth.c in the Linux kernel before 2.6.36.1 on 64-bit platforms allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a large argument in an ioctl call.

Affected configurations

NVD
Node
linuxlinux_kernelRange<2.6.36.1x64
Node
fedoraprojectfedoraMatch13
Node
opensuseopensuseMatch11.2
OR
opensuseopensuseMatch11.3
OR
suselinux_enterprise_desktopMatch10sp3
OR
suselinux_enterprise_desktopMatch11sp1
OR
suselinux_enterprise_real_time_extensionMatch11sp1
OR
suselinux_enterprise_serverMatch9
OR
suselinux_enterprise_serverMatch10sp3
OR
suselinux_enterprise_serverMatch11sp1
OR
suselinux_enterprise_software_development_kitMatch10sp3

References

Social References

More

6.2 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.2%