Lucene search
Ubuntu.comUB:CVE-2010-3699HistoryDec 08, 2010 - 12:00 a.m.
CVE-2010-3699
2010-12-0800:00:00
ubuntu.com
ubuntu.com
12
2.7 Low
CVSS2
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:A/AC:L/Au:S/C:N/I:N/A:P
0.001 Low
EPSS
Percentile
28.1%
The backend driver in Xen 3.x allows guest OS users to cause a denial of
service via a kernel thread leak, which prevents the device and guest OS
from being shut down or create a zombie domain, causes a hang in zenwatch,
or prevents unspecified xm commands from working properly, related to (1)
netback, (2) blkback, or (3) blktap.
Notes
| Author | Note |
|---|---|
| kees | The vulnerability described by CVE-2010-3699 probably exists, but I’ve not been able to reproduce it. It likely requires more block and network devices then I have at my disposal. Checked out http://xenbits.xensource.com/linux-2.6.18-xen.hg and compared. Not all of the original upstream patch was appropriate since it caused a regression with udev. |
Related
prion
prion
Design/Logic Flaw
2010-12-08 20:00:00
cve
cve
CVE-2010-3699
2010-12-08 20:00:01
nvd
nvd
CVE-2010-3699
2010-12-08 20:00:01
cvelist
cvelist
CVE-2010-3699
2010-12-08 19:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:52:42
suse
suse
local privilege escalation in kernel
2011-01-25 15:24:01
remote denial of service, local privilege in kernel
2011-03-08 16:13:04
local privilege escalation, remote denial of in kernel
2011-04-18 14:12:03
nessus
nessus
SuSE 10 Security Update : the Linux kernel (ZYPP Patch Number 7304)
2012-05-17 00:00:00
SuSE 10 Security Update : the Linux kernel (ZYPP Patch Number 7303)
2011-01-27 00:00:00
Scientific Linux Security Update : kernel on SL5.x i386/x86_64
2012-08-01 00:00:00
openvas
openvas
Oracle: Security Advisory (ELSA-2011-0004)
2015-10-06 00:00:00
CentOS Update for kernel CESA-2011:0004 centos5 i386
2011-08-09 00:00:00
RedHat Update for kernel RHSA-2011:0004-01
2011-01-11 00:00:00
centos
centos
kernel security update
2011-01-06 12:23:15
oraclelinux
oraclelinux
kernel security, bug fix, and enhancement update
2011-01-04 00:00:00
Oracle Linux 5.6 kernel security and bug fix update
2011-01-20 00:00:00
redhat
redhat
(RHSA-2011:0004) Important: kernel security, bug fix, and enhancement update
2011-01-04 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2153-1] linux-2.6 security update
2011-02-02 00:00:00
osv
osv
linux-2.6 - several issues
2011-01-30 00:00:00
debian
debian
[SECURITY] [DSA 2153-1] linux-2.6 security update
2011-01-30 06:42:05
ubuntu
ubuntu
Linux kernel vulnerabilities
2011-02-25 00:00:00
vmware
vmware
VMware ESXi and ESX updates to third party libraries and ESX Service Console
2011-10-12 00:00:00
VMware ESX third party updates for Service Console packages glibc and dhcp
2011-10-12 00:00:00
2.7 Low
CVSS2
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:A/AC:L/Au:S/C:N/I:N/A:P
0.001 Low
EPSS
Percentile
28.1%
Related for UB:CVE-2010-3699