CVE-2010-0410— Linux Kernel ‘drivers/connector/connector.c’本地拒绝服务漏洞

一分钟漏洞结论

复制摘要 复制引用

影响对象

n/a n/a

利用判断

尚无明确在野利用证据，仍需结合暴露面评估

建议动作

优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。

Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。 Linux Kernel中存在拒绝服务漏洞。本地用户可以通过向Linux的‘drivers/connector/connector.c‘驱动发送任意数量的NETLINK_CONNECTOR消息导致拒绝服务的情况。

CVE-2010-0410 影响 n/a n/a。尚无明确在野利用证据，仍需结合暴露面评估。Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。 Linux Kernel中存在拒绝服务漏洞。本地用户可以通过向Linux的‘drivers/connector/connector.c‘驱动发送任意数量的NETLINK_CONNECTOR消息导致拒 CVE-2010-0410 漏洞详情，神龙漏洞库，https://cve.imfht.com/detail/CVE-2010-0410

一、 漏洞 CVE-2010-0410 基础信息

受影响产品

二、漏洞 CVE-2010-0410 的公开POC

三、漏洞 CVE-2010-0410 的情报信息

CVE-2010-0410 补丁与修复 (1)

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f98bfbd78c37c5946cc53089da32a5f741efdeb7 x_refsource_CONFIRM

CVE-2010-0410 厂商安全公告 (18)

• https://bugzilla.redhat.com/show_bug.cgi?id=561682 x_refsource_CONFIRM
• http://www.vmware.com/security/advisories/VMSA-2011-0003.html x_refsource_CONFIRM
• http://secunia.com/advisories/39033 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/39649 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/43315 third-party-advisory x_refsource_SECUNIA
• http://www.securityfocus.com/bid/38058 vdb-entry x_refsource_BID
• http://secunia.com/advisories/38557 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/38492 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/38922 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/38779 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/39742 third-party-advisory x_refsource_SECUNIA
• http://www.debian.org/security/2010/dsa-2005 vendor-advisory x_refsource_DEBIAN
• http://www.debian.org/security/2010/dsa-1996 vendor-advisory x_refsource_DEBIAN
• http://www.ubuntu.com/usn/USN-914-1 vendor-advisory x_refsource_UBUNTU
• http://www.vupen.com/english/advisories/2010/0638 vdb-entry x_refsource_VUPEN
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:088 vendor-advisory x_refsource_MANDRIVA
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10903 vdb-entry signature x_refsource_OVAL
• http://www.securityfocus.com/archive/1/516397/100/0/threaded mailing-list x_refsource_BUGTRAQ

CVE-2010-0410 邮件列表归档 (7)

• http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035070.html vendor-advisory x_refsource_FEDORA
• http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035159.html vendor-advisory x_refsource_FEDORA
• http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00006.html vendor-advisory x_refsource_SUSE
• http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html vendor-advisory x_refsource_SUSE
• http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00007.html vendor-advisory x_refsource_SUSE
• http://www.openwall.com/lists/oss-security/2010/02/03/1 mailing-list x_refsource_MLIST
• http://www.openwall.com/lists/oss-security/2010/02/03/3 mailing-list x_refsource_MLIST

CVE-2010-0410 其他参考 (5)

• http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.8 x_refsource_CONFIRM
• http://support.avaya.com/css/P8/documents/100088287 x_refsource_CONFIRM
• http://www.redhat.com/support/errata/RHSA-2010-0161.html vendor-advisory x_refsource_REDHAT
• http://www.redhat.com/support/errata/RHSA-2010-0398.html vendor-advisory x_refsource_REDHAT
• http://www.novell.com/linux/security/advisories/2010_23_kernel.html vendor-advisory x_refsource_SUSE

• https://www.cve.org/CVERecord?id=CVE-2010-0410

同批安全公告 · n/a · 2010-02-21 · 共 9 条

IV. Related Vulnerabilities

V. Comments for CVE-2010-0410