QwikSec

Security Database

CVE

CWE

Training

CVE-2010-1436

Published: May 21, 2010

Modified: Aug 7, 2024

PUBLISHED

Description

gfs2 in the Linux kernel 2.6.18, and possibly other versions, does not properly handle when the gfs2_quota struct occupies two separate pages, which allows local users to cause a denial of service (kernel panic) via certain manipulations that cause an out-of-bounds write, as demonstrated by writing from an ext3 file system to a gfs2 file system.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

[oss-security] 20100427 CVE request - gfs2 kernel issue

mailing-list

x_refsource_MLIST

kernel-gfs2quota-dos(58839)

vdb-entry

x_refsource_XF

[oss-security] 20100427 Re: CVE request - gfs2 kernel issue

mailing-list

x_refsource_MLIST

oval:org.mitre.oval:def:10652

vdb-entry

signature

x_refsource_OVAL

https://bugzilla.redhat.com/show_bug.cgi?id=586006

x_refsource_CONFIRM

third-party-advisory

x_refsource_SECUNIA

http://www.vmware.com/security/advisories/VMSA-2011-0003.html

x_refsource_CONFIRM

20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX

mailing-list

x_refsource_BUGTRAQ

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.