CVE-2010-0410

Quick assessment

Copy summary Copy citation

Affected

n/a n/a

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。 Linux Kernel中存在拒绝服务漏洞。本地用户可以通过向Linux的‘drivers/connector/connector.c‘驱动发送任意数量的NETLINK_CONNECTOR消息导致拒绝服务的情况。

CVE-2010-0410 affects n/a n/a. No confirmed in-the-wild exploitation; assess based on exposure. Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。 Linux Kernel中存在拒绝服务漏洞。本地用户可以通过向Linux的‘drivers/connector/connector.c‘驱动发送任意数量的NETLINK_CONNECTOR消息导致拒 CVE-2010-0410 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2010-0410

I. Basic Information for CVE-2010-0410

Affected Products

II. Public POCs for CVE-2010-0410

III. Intelligence Information for CVE-2010-0410

Patches & Fixes for CVE-2010-0410 (1)

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f98bfbd78c37c5946cc53089da32a5f741efdeb7 x_refsource_CONFIRM

Vendor Advisories for CVE-2010-0410 (18)

• https://bugzilla.redhat.com/show_bug.cgi?id=561682 x_refsource_CONFIRM
• http://www.vmware.com/security/advisories/VMSA-2011-0003.html x_refsource_CONFIRM
• http://secunia.com/advisories/39033 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/39649 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/43315 third-party-advisory x_refsource_SECUNIA
• http://www.securityfocus.com/bid/38058 vdb-entry x_refsource_BID
• http://secunia.com/advisories/38557 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/38492 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/38922 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/38779 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/39742 third-party-advisory x_refsource_SECUNIA
• http://www.debian.org/security/2010/dsa-2005 vendor-advisory x_refsource_DEBIAN
• http://www.debian.org/security/2010/dsa-1996 vendor-advisory x_refsource_DEBIAN
• http://www.ubuntu.com/usn/USN-914-1 vendor-advisory x_refsource_UBUNTU
• http://www.vupen.com/english/advisories/2010/0638 vdb-entry x_refsource_VUPEN
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:088 vendor-advisory x_refsource_MANDRIVA
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10903 vdb-entry signature x_refsource_OVAL
• http://www.securityfocus.com/archive/1/516397/100/0/threaded mailing-list x_refsource_BUGTRAQ

Mailing List Discussions for CVE-2010-0410 (7)

• http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035070.html vendor-advisory x_refsource_FEDORA
• http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035159.html vendor-advisory x_refsource_FEDORA
• http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00006.html vendor-advisory x_refsource_SUSE
• http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html vendor-advisory x_refsource_SUSE
• http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00007.html vendor-advisory x_refsource_SUSE
• http://www.openwall.com/lists/oss-security/2010/02/03/1 mailing-list x_refsource_MLIST
• http://www.openwall.com/lists/oss-security/2010/02/03/3 mailing-list x_refsource_MLIST

Other References for CVE-2010-0410 (5)

• http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.8 x_refsource_CONFIRM
• http://support.avaya.com/css/P8/documents/100088287 x_refsource_CONFIRM
• http://www.redhat.com/support/errata/RHSA-2010-0161.html vendor-advisory x_refsource_REDHAT
• http://www.redhat.com/support/errata/RHSA-2010-0398.html vendor-advisory x_refsource_REDHAT
• http://www.novell.com/linux/security/advisories/2010_23_kernel.html vendor-advisory x_refsource_SUSE

• https://www.cve.org/CVERecord?id=CVE-2010-0410

Same Patch Batch · n/a · 2010-02-21 · 9 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2010-0410