Published: 08/09/2010 Updated: 13/02/2023

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 642

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Buffer overflow in the ecryptfs_uid_hash macro in fs/ecryptfs/messaging.c in the eCryptfs subsystem in the Linux kernel prior to 2.6.35 might allow local users to gain privileges or cause a denial of service (system crash) via unspecified vectors.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
vmware esx 4.1
vmware esx 4.0
avaya aura system manager 6.0
avaya aura system manager 5.2
avaya aura communication manager 5.2
avaya aura system platform 1.1
avaya aura system platform 6.0
avaya aura system manager 6.1
avaya aura system manager 6.1.1
avaya aura session manager 1.1
avaya aura session manager 5.2
avaya aura session manager 6.0
avaya aura presence services 6.1
avaya aura presence services 6.1.1
avaya aura presence services 6.0
avaya iq 5.1
avaya iq 5.0
avaya aura voice portal 5.0
avaya aura voice portal 5.1

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix multiple security issues and several bugsare now available for Red Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as havingimportant secur ...

Multiple security flaws ...

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leak The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2010-2492 Andre Osterhues reported an issue in the eCryptfs subsystem A buffer overflow condition may allow ...

CWE-120 https://bugzilla.redhat.com/show_bug.cgi?id=611385 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35 http://www.mandriva.com/security/advisories?name=MDVSA-2010:172 http://www.redhat.com/support/errata/RHSA-2010-0723.html http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 http://www.redhat.com/support/errata/RHSA-2011-0007.html http://secunia.com/advisories/42890 http://support.avaya.com/css/P8/documents/100113326 http://secunia.com/advisories/46397 http://www.vmware.com/security/advisories/VMSA-2011-0012.html http://www.securityfocus.com/archive/1/520102/100/0/threaded http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a6f80fb7b5986fda663d94079d3bba0937a6b6ff https://access.redhat.com/errata/RHSA-2010:0723 https://usn.ubuntu.com/966-1/https://nvd.nist.gov

CVE-2010-2492

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect