CVE-2010-2492 Buffer overflow in the ecryptfs_uid_hash macro in fs/ecryptfs/messaging.c in the eCryptfs subsystem in the Linux kernel before 2.6.35 might allow local users to gain privileges or cause a denial of se...
HighCVSS 7.8
EPSS 0.43%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the ecryptfs_uid_hash macro in fs/ecryptfs/messaging.c in the eCryptfs subsystem in the Linux kernel before 2.6.35 might allow local users to gain privileges or cause a denial of service (system crash) via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux kernel | < 2.6.35 | 2.6.35 |
| VMware ESX | = 4.0 | No fix listed |
| VMware ESX | = 4.1 | No fix listed |
| avaya aura communication manager | = 5.2 | No fix listed |
| avaya aura presence services | = 6.0 | No fix listed |
| avaya aura presence services | = 6.1 | No fix listed |
| avaya aura presence services | = 6.1.1 | No fix listed |
| avaya aura session manager | = 1.1 | No fix listed |
| avaya aura session manager | = 5.2 | No fix listed |
| avaya aura session manager | = 6.0 | No fix listed |
| avaya aura system manager | = 5.2 | No fix listed |
| avaya aura system manager | = 6.0 | No fix listed |
| avaya aura system manager | = 6.1 | No fix listed |
| avaya aura system manager | = 6.1.1 | No fix listed |
| avaya aura system platform | = 1.1 | No fix listed |
| avaya aura system platform | = 6.0 | No fix listed |
| avaya aura system platform | = 6.0-sp1 | No fix listed |
| avaya aura voice portal | = 5.0 | No fix listed |
| avaya aura voice portal | = 5.1 | No fix listed |
| avaya aura voice portal | = 5.1-sp1 | No fix listed |
| avaya iq | = 5.0 | No fix listed |
| avaya iq | = 5.1 | No fix listed |
References
- git.kernel.org
- 42890 broken-link third-party-advisory
- 46397 broken-link third-party-advisory
- support.avaya.com third-party-advisory
- www.kernel.org broken-link
- MDVSA-2010:172 broken-link vendor-advisory
- MDVSA-2010:198 broken-link vendor-advisory
- RHSA-2010:0723 broken-link vendor-advisory
- RHSA-2011:0007 broken-link vendor-advisory
- 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console mailing-list third-party-advisory vdb-entry
- www.vmware.com patch third-party-advisory
- bugzilla.redhat.com issue-tracking patch third-party-advisory