CVE Feed

    Dashboard / CVE / CVE-2010-2798

    CVE-2010-2798

    The gfs2_dirent_find_space function in fs/gfs2/dir.c in the Linux kernel before 2.6.35 uses an incorrect size value in calculations associated with sentinel directory entries, which allows local users to cause a denial of service (NULL pointer dereference and panic) and possibly have unspecified other impact by renaming a file in a GFS2 filesystem, related to the gfs2_rename function in fs/gfs2/ops_inode.c.

    Published:Jun 8, 2010
    Last Modified:Apr 11, 2025
    EPS:Sep 8, 2010
    EPSS Score:0.00053
    CVSS Score:7.8

    Affected Products

    Vendor
    Avaya
    Product
    Aura Communication Manager
    Vendor
    Avaya
    Product
    Aura Presence Services
    Vendor
    Avaya
    Product
    Aura Session Manager
    Vendor
    Avaya
    Product
    Aura System Manager
    Vendor
    Avaya
    Product
    Aura System Platform
    Vendor
    Avaya
    Product
    Iq
    Vendor
    Avaya
    Product
    Voice Portal
    Vendor
    Canonical
    Product
    Ubuntu Linux
    Vendor
    Debian
    Product
    Debian Linux
    Vendor
    Linux
    Product
    Linux Kernel
    Vendor
    Opensuse
    Product
    Opensuse
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Rhel Eus
    Vendor
    Suse
    Product
    Linux Enterprise High Availability Extension
    Vendor
    Suse
    Product
    Suse Linux Enterprise Desktop
    Vendor
    Suse
    Product
    Suse Linux Enterprise Server
    Vendor
    Vmware
    Product
    Esx

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-128 Integer Attacks
    CAPEC-129 Pointer Manipulation

    Related CVEs

    CVE-2022-2249 (CVSS 7.7) — Privilege escalation related vulnerabilities were discovered in Avaya Aura Communication Manager that may allo…
    CVE-2020-7029 (CVSS 6.4) — A Cross-Site Request Forgery (CSRF) vulnerability was discovered in the System Management Interface Web compon…
    CVE-2018-15617 (CVSS 6.5) — A vulnerability in the "capro" (Call Processor) process component of Avaya Aura Communication Manager could al…
    CVE-2018-15611 (CVSS 6.3) — A vulnerability in the local system administration component of Avaya Aura Communication Manager can allow an …
    CVE-2016-5285 (CVSS 7.5) — A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL che…
    CVE-2010-2942 (CVSS 5.5) — The actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc2 does no…
    CVE-2010-2492 (CVSS 7.8) — Buffer overflow in the ecryptfs_uid_hash macro in fs/ecryptfs/messaging.c in the eCryptfs subsystem in the Lin…
    CVE-2010-2943 (CVSS 8.1) — The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before readi…
    CVE-2009-3939 (CVSS 7.1) — The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable …

    References

    http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=728a756b8fcd22d80e2dbba8117a8a3aafd3f203
    http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html
    http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html
    http://secunia.com/advisories/46397
    http://securitytracker.com/id?1024386
    http://support.avaya.com/css/P8/documents/100113326
    http://www.debian.org/security/2010/dsa-2094
    http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35
    http://www.mandriva.com/security/advisories?name=MDVSA-2010:198
    http://www.openwall.com/lists/oss-security/2010/08/02/1
    http://www.openwall.com/lists/oss-security/2010/08/02/10
    http://www.redhat.com/support/errata/RHSA-2010-0660.html
    http://www.redhat.com/support/errata/RHSA-2010-0670.html
    http://www.redhat.com/support/errata/RHSA-2010-0723.html
    http://www.securityfocus.com/archive/1/520102/100/0/threaded
    http://www.securityfocus.com/bid/42124
    http://www.ubuntu.com/usn/USN-1000-1
    http://www.vmware.com/security/advisories/VMSA-2011-0012.html
    https://bugzilla.redhat.com/show_bug.cgi?id=620300
    http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=728a756b8fcd22d80e2dbba8117a8a3aafd3f203
    http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html
    http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html
    http://secunia.com/advisories/46397
    http://securitytracker.com/id?1024386
    http://support.avaya.com/css/P8/documents/100113326
    http://www.debian.org/security/2010/dsa-2094
    http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35
    http://www.mandriva.com/security/advisories?name=MDVSA-2010:198
    http://www.openwall.com/lists/oss-security/2010/08/02/1
    http://www.openwall.com/lists/oss-security/2010/08/02/10
    http://www.redhat.com/support/errata/RHSA-2010-0660.html
    http://www.redhat.com/support/errata/RHSA-2010-0670.html
    http://www.redhat.com/support/errata/RHSA-2010-0723.html
    http://www.securityfocus.com/archive/1/520102/100/0/threaded
    http://www.securityfocus.com/bid/42124
    http://www.ubuntu.com/usn/USN-1000-1
    http://www.vmware.com/security/advisories/VMSA-2011-0012.html
    https://bugzilla.redhat.com/show_bug.cgi?id=620300

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High