Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-2226
HistorySep 03, 2010 - 12:00 a.m.

CVE-2010-2226

2010-09-0300:00:00
ubuntu.com
ubuntu.com
10

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

10.1%

The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux kernel before
2.6.35 does not properly check the file descriptors passed to the SWAPEXT
ioctl, which allows local users to leverage write access and obtain read
access by swapping one file into another file.

Bugs

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

10.1%