CVE-2010-4256
CVSS V2 Low 2.1
CVSS V3 None
Description
The pipe_fcntl function in fs/pipe.c in the Linux kernel before 2.6.37 does not properly determine whether a file is a named pipe, which allows local users to cause a denial of service via an F_SETPIPE_SZ fcntl call.
Overview
- CVE ID
- CVE-2010-4256
- Assigner
- secalert@redhat.com
- Vulnerability Status
- Modified
- Published Version
- 2011-01-25T19:00:03
- Last Modified Date
- 2023-02-13T04:28:31
Weakness Enumerations
CPE Configuration (Product)
CPE | Vulnerable | Operator | Version Start | Version End |
---|---|---|---|---|
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 1 | OR | 2.6.37 |
CVSS Version 2
- Version
- 2.0
- Vector String
- AV:L/AC:L/Au:N/C:N/I:N/A:P
- Access Vector
- LOCAL
- Access Compatibility
- LOW
- Authentication
- NONE
- Confidentiality Impact
- NONE
- Integrity Impact
- NONE
- Availability Impact
- PARTIAL
- Base Score
- 2.1
- Severity
- LOW
- Exploitability Score
- 3.9
- Impact Score
- 2.9
References
Reference URL | Reference Tags |
---|---|
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=c66fb347946ebdd5b10908866ecc9fa05ee2cf3d | Patch Vendor Advisory |
http://openwall.com/lists/oss-security/2010/11/30/9 | Mailing List Patch Third Party Advisory |
http://openwall.com/lists/oss-security/2010/11/30/6 | Mailing List Patch Third Party Advisory |
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37 | Broken Link |
Sources
Source Name | Source URL |
---|---|
NIST | https://nvd.nist.gov/vuln/detail/CVE-2010-4256 |
MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4256 |
History
Created | Old Value | New Value | Data Type | Notes |
---|---|---|---|---|
2022-05-10 17:24:31 | Added to TrackCVE | |||
2023-02-13 05:04:20 | 2023-02-13T04:28:31 | CVE Modified Date | updated | |
2023-02-13 05:04:20 | Analyzed | Modified | Vulnerability Status | updated |