Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=87e2831c3fa39cbf6f7ab676bb5aef039b9659e2 - http://securitytracker.com/id?1024708 - http://www.redhat.com/support/errata/RHSA-2010-0839.html - https://bugzilla.redhat.com/show_bug.cgi?id=631716 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html
CVE ID: CVE-2010-3067 State: PUBLISHED Published: 2010-09-21T17:00:00 Last Updated: 2024-08-07T02:55:46.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the do_io_submit function in fs/aio.c in the Linux kernel before 2.6.36-rc4-next-20100915 allows local users to cause a denial of service or possibly have unspecified other impact via crafted use of the io_submit system call. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42778 - http://www.ubuntu.com/usn/USN-1000-1 - http://secunia.com/advisories/42801 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - http:
ories/42801 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html - http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.36-rc4-next-20100915.bz2 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html - http://www.redhat.com/support/errata/RHSA-2011-0007.html - https://bugzilla.redhat.com/show_bug.cgi?id=629441 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html - http://www.vupen.com/english/advisories/2011/0298 - http://www.mandriva.com/se
security-announce/2010-12/msg00004.html - http://www.vupen.com/english/advisories/2011/0298 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:051 - http://www.redhat.com/support/errata/RHSA-2010-0839.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:257 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://www.vupen.com/english/advisories/2011/0375 - http://secunia.com/advisories/42890 - http://www.vupen.com/english/advisories/2011/0012 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61884 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:029 - http:
ensuse-security-announce/2011-02/msg00002.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:029 - http://www.redhat.com/support/errata/RHSA-2010-0758.html - http://secunia.com/advisories/43291 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=75e1c70fc31490ef8a373ea2a4bea2524099b478 - http://www.redhat.com/support/errata/RHSA-2010-0779.html - http://www.debian.org/security/2010/dsa-2126
CVE ID: CVE-2010-3068 State: REJECTED Published: 2017-07-21T19:00:00 Last Updated: 2017-07-21T18:57:01 Description: No description available.
CVE ID: CVE-2010-3069 State: PUBLISHED Published: 2010-09-15T17:26:00 Last Updated: 2024-08-07T02:55:46.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the (1) sid_parse and (2) dom_sid_parse functions in Samba before 3.5.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted Windows Security ID (SID) on a file share. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=130835366526620&w=2 - http://secunia.com/advisories/42885 - http://www.vupen.com/english/advisories/2010/2378 - http://support.apple.com/kb/HT4723 - http://lists.fedoraproject.org/
http://www.vupen.com/english/advisories/2010/2378 - http://support.apple.com/kb/HT4723 - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047697.html - http://us1.samba.org/samba/security/CVE-2010-3069.html - http://secunia.com/advisories/41354 - http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html - http://marc.info/?l=bugtraq&m=130835366526620&w=2 - http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/61773 - http://www.securityfocus.com/archive/1/515055/100/0/threaded - http://www.ubuntu.com/usn/USN-987-1 - http://www.securitytracker.com/id?1024434 - http://secunia.com/a
/100/0/threaded - http://www.ubuntu.com/usn/USN-987-1 - http://www.securitytracker.com/id?1024434 - http://secunia.com/advisories/41447 - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047650.html - http://secunia.com/advisories/42531 - http://www.vupen.com/english/advisories/2010/3126 - http://us1.samba.org/samba/history/samba-3.5.5.html - http://www.vmware.com/security/advisories/VMSA-2010-0019.html - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html - http://www.securityfocus.com/bid/43212 - http://www.vupen.com/english/advisories/2011/0091 - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047758.html - http://lis
advisories/2011/0091 - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047758.html - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html - http://www.redhat.com/support/errata/RHSA-2010-0860.html - http://support.apple.com/kb/HT4581
CVE ID: CVE-2010-3070 State: PUBLISHED Published: 2010-09-28T17:00:00 Last Updated: 2024-08-07T02:55:46.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in NuSOAP 0.9.5, as used in MantisBT and other products, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to an arbitrary PHP script that uses NuSOAP classes. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/09/03/2 - https://bugzilla.redhat.com/show_bug.cgi?id=629585 - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/048639.html - http://lists.fedoraproject.org/piperm
://lists.fedoraproject.org/pipermail/package-announce/2010-September/048639.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/048659.html - http://git.debian.org/?p=users/olberger-guest/nusoap.git%3Ba=blob%3Bf=debian/patches/595248.patch%3Bh=6af3d725fe74d839764d9755c5bb18458a192518%3Bhb=268f03b88c6900d1a87b17734c248c705c22cb07 - http://www.openwall.com/lists/oss-security/2010/09/07/4 - http://secunia.com/advisories/41653 - http://sourceforge.net/projects/nusoap/forums/forum/193579/topic/3834005 - http://git.mantisbt.org/?p=mantisbt.git%3Ba=commit%3Bh=edb817991b99cd5538f102be26865fde7c6b7212 - https://bugzilla.redhat.com/show_bug.cgi?id=633011 - http://bugs.debia
it%3Bh=edb817991b99cd5538f102be26865fde7c6b7212 - https://bugzilla.redhat.com/show_bug.cgi?id=633011 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=595248 - http://www.vupen.com/english/advisories/2010/2535 - http://www.openwall.com/lists/oss-security/2010/09/14/12 - http://www.securityfocus.com/bid/42959 - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/048325.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/048317.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/048548.html - http://www.openwall.com/lists/oss-security/2010/09/14/13 - http://www.mantisbt.org/bugs/view.php?id=12312 - http://sourceforge
/www.openwall.com/lists/oss-security/2010/09/14/13 - http://www.mantisbt.org/bugs/view.php?id=12312 - http://sourceforge.net/mailarchive/message.php?msg_name=4C8FC573.3060900%40leetcode.net - http://git.debian.org/?p=users/olberger-guest/nusoap.git%3Ba=blobdiff%3Bf=debian/patches/595248.patch%3Bh=11202fa70433b62aeab7dfc68af668329bc0fe7e%3Bhp=6af3d725fe74d839764d9755c5bb18458a192518%3Bhb=3ac7a26a49086c6b91fb79e5acafcfcdc5d6980a%3Bhpb=268f03b88c6900d1a87b17734c248c705c22cb07 - http://www.mantisbt.org/bugs/changelog_page.php?version_id=111
CVE ID: CVE-2010-3071 State: PUBLISHED Published: 2010-10-12T21:00:00 Last Updated: 2024-08-07T02:55:46.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: bip before 0.8.6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an empty USER command. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42889 - http://www.vupen.com/english/advisories/2011/0096 - http://bip.t1r.net/ - http://www.openwall.com/lists/oss-security/2010/09/05/1 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=595409 - https://bugzilla.redhat.com/show_bug.cgi?id=630437 - http://www.securityfocus.com/bid/42995 - http
port.cgi?bug=595409 - https://bugzilla.redhat.com/show_bug.cgi?id=630437 - http://www.securityfocus.com/bid/42995 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052992.html - http://www.openwall.com/lists/oss-security/2010/09/07/6
CVE ID: CVE-2010-3072 State: PUBLISHED Published: 2010-09-20T20:00:00 Last Updated: 2024-08-07T02:55:46.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2 allow remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047820.html - http://www.openwall.com/lists/oss-security/2010/09/05/2 - https://bugzilla.redhat.com/show_bug.cgi?id=630444 - http://lists.fedoraproject.org/pipermail/package-anno
010/09/05/2 - https://bugzilla.redhat.com/show_bug.cgi?id=630444 - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047787.html - http://secunia.com/advisories/41298 - http://www.vupen.com/english/advisories/2010/2433 - http://www.squid-cache.org/Advisories/SQUID-2010_3.txt - http://www.squid-cache.org/Versions/v3/3.0/changesets/squid-3.0-9189.patch - http://secunia.com/advisories/41477 - http://www.debian.org/security/2010/dsa-2111 - http://www.securityfocus.com/bid/42982 - http://www.squid-cache.org/Versions/v3/3.1/changesets/squid-3.1-10090.patch - http://secunia.com/advisories/41534 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html - htt
- http://secunia.com/advisories/41534 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html - http://www.openwall.com/lists/oss-security/2010/09/07/7
CVE ID: CVE-2010-3073 State: PUBLISHED Published: 2010-09-17T17:46:00 Last Updated: 2024-08-07T02:55:46.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: SSL_Cipher.cpp in EncFS before 1.7.0 does not properly handle integer data sizes when constructing headers intended for randomization of initialization vectors, which makes it easier for local users to obtain sensitive information by defeating cryptographic protection mechanisms. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41158 - https://bugzilla.redhat.com/show_bug.cgi?id=630460 - http://secunia.com/advisories/41478 - http://code.google.com/p/encfs/source/detail?r=59 - http:
show_bug.cgi?id=630460 - http://secunia.com/advisories/41478 - http://code.google.com/p/encfs/source/detail?r=59 - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047794.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047825.html - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html - http://archives.neohapsis.com/archives/fulldisclosure/2010-08/0316.html - http://www.openwall.com/lists/oss-security/2010/09/05/3 - http://www.openwall.com/lists/oss-security/2010/09/07/8 - http://www.openwall.com/lists/oss-security/2010/09/06/1 - http://www.vupen.com/english/advisories/2010/2414 - http://lists.fedoraproject.org/pip
lists/oss-security/2010/09/06/1 - http://www.vupen.com/english/advisories/2010/2414 - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047798.html
CVE ID: CVE-2010-3074 State: PUBLISHED Published: 2010-09-17T17:46:00 Last Updated: 2024-08-07T02:55:46.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: SSL_Cipher.cpp in EncFS before 1.7.0 uses an improper combination of an AES cipher and a CBC cipher mode for encrypted filesystems, which allows local users to obtain sensitive information via a watermark attack. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41158 - https://bugzilla.redhat.com/show_bug.cgi?id=630460 - http://secunia.com/advisories/41478 - http://code.google.com/p/encfs/source/detail?r=59 - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/
//code.google.com/p/encfs/source/detail?r=59 - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047794.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047825.html - http://bugs.gentoo.org/show_bug.cgi?id=335938 - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html - http://archives.neohapsis.com/archives/fulldisclosure/2010-08/0316.html - http://www.openwall.com/lists/oss-security/2010/09/05/3 - http://www.openwall.com/lists/oss-security/2010/09/07/8 - http://www.openwall.com/lists/oss-security/2010/09/06/1 - http://www.vupen.com/english/advisories/2010/2414 - http://www.arg0.net/encfs - http://lists.fedoraproject
010/09/06/1 - http://www.vupen.com/english/advisories/2010/2414 - http://www.arg0.net/encfs - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047798.html
CVE ID: CVE-2010-3075 State: PUBLISHED Published: 2010-09-17T17:46:00Z Last Updated: 2024-08-07T02:55:46.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: EncFS before 1.7.0 encrypts multiple blocks by means of the CFB cipher mode with the same initialization vector, which makes it easier for local users to obtain sensitive information via calculations involving recovery of XORed data, as demonstrated by an attack on encrypted data in which the last block contains only one byte. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41158 - https://bugzilla.redhat.com/show_bug.cgi?id=630460 - http://secunia.com/advisories/41478 - http://l
m/advisories/41158 - https://bugzilla.redhat.com/show_bug.cgi?id=630460 - http://secunia.com/advisories/41478 - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047794.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047825.html - http://archives.neohapsis.com/archives/fulldisclosure/2010-08/0316.html - http://www.openwall.com/lists/oss-security/2010/09/05/3 - http://www.openwall.com/lists/oss-security/2010/09/07/8 - http://www.openwall.com/lists/oss-security/2010/09/06/1 - http://www.vupen.com/english/advisories/2010/2414 - http://www.arg0.net/encfs - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047798.html
CVE ID: CVE-2010-3076 State: PUBLISHED Published: 2010-10-12T21:00:00 Last Updated: 2024-08-07T02:55:46.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: The filter function in php/src/include.php in Simple Management for BIND (aka smbind) before 0.4.8 does not anchor a certain regular expression, which allows remote attackers to conduct SQL injection attacks and execute arbitrary SQL commands via the username parameter to the admin login page. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/09/05/5 - http://sourceforge.net/projects/smbind/files/smbind/0.4.8/smbind-0.4.8.tar.bz2/download - http://www.debian.org/se
5/5 - http://sourceforge.net/projects/smbind/files/smbind/0.4.8/smbind-0.4.8.tar.bz2/download - http://www.debian.org/security/2010/dsa-2103 - http://packetstormsecurity.org/1009-exploits/smbind-sql.txt - http://www.openwall.com/lists/oss-security/2010/09/07/10
CVE ID: CVE-2010-3077 State: PUBLISHED Published: 2010-11-09T20:00:00 Last Updated: 2024-08-07T02:55:46.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in util/icon_browser.php in the Horde Application Framework before 3.3.9 allows remote attackers to inject arbitrary web script or HTML via the subdir parameter. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=630687 - http://seclists.org/fulldisclosure/2010/Sep/82 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050408.html - http://git.horde.org/diff.php/horde/util/icon_browser.php?rt=horde-git&r1=a9
ackage-announce/2010-November/050408.html - http://git.horde.org/diff.php/horde/util/icon_browser.php?rt=horde-git&r1=a978a35c3e95e784253508fd4333d2fbb64830b6&r2=9342addbd2b95f184f230773daa4faf5ef6d65e9 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050423.html - http://secunia.com/advisories/42140 - http://lists.horde.org/archives/announce/2010/000557.html
CVE ID: CVE-2010-3078 State: PUBLISHED Published: 2010-09-21T17:00:00 Last Updated: 2024-08-07T02:55:46.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xfs_ioc_fsgetxattr function in fs/xfs/linux-2.6/xfs_ioctl.c in the Linux kernel before 2.6.36-rc4 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/09/07/1 - http://www.ubuntu.com/usn/USN-1000-1 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html - http://www.linux.sgi.com/archi
USN-1000-1 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html - http://www.linux.sgi.com/archives/xfs-masters/2010-09/msg00002.html - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a122eb2fdfd78b58c6dd992d6f4b1aaef667eef9 - http://secunia.com/advisories/46397 - http://www.redhat.com/support/errata/RHSA-2011-0007.html - http://www.vupen.com/english/advisories/2010/2430 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://www.vupen.com/english/advisories/2011/0298 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html -
ww.vupen.com/english/advisories/2011/0298 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html - http://www.redhat.com/support/errata/RHSA-2010-0839.html - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://www.openwall.com/lists/oss-security/2010/09/07/12 - http://secunia.com/advisories/42890 - http://securitytracker.com/id?1024418 - http://secunia.com/advisories/41284 - https://bugzilla.redhat.com/show_bug.cgi?id=630804 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.36-rc4 - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html - http://www.securityfocus.com/bid/43022 - http://secunia.com/advisories/41512
CVE ID: CVE-2010-3079 State: PUBLISHED Published: 2010-09-30T14:00:00 Last Updated: 2024-08-07T02:55:46.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: kernel/trace/ftrace.c in the Linux kernel before 2.6.35.5, when debugfs is enabled, does not properly handle interaction between mutex possession and llseek operations, which allows local users to cause a denial of service (NULL pointer dereference and outage of all function tracing files) via an lseek call on a file descriptor associated with the set_ftrace_filter file. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35.5 - http://www.ubuntu.com/usn/US
m Container: References: - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35.5 - http://www.ubuntu.com/usn/USN-1041-1 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://www.redhat.com/support/errata/RHSA-2010-0842.html - http://www.vupen.com/english/advisories/2011/0298 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html - https://bugzilla.redhat.com/show_bug.cgi?id=631623 - http://secunia.com/advisories/42758 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9c55cb12c1c172e2d51e85fbb5a4796ca86b77e7 - http://www.securityfocus.com/bid/43684 - http://www.vupen.com/english/advisories/2011/0070
CVE ID: CVE-2010-3080 State: PUBLISHED Published: 2010-09-21T17:00:00 Last Updated: 2024-08-07T02:55:46.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the snd_seq_oss_open function in sound/core/seq/oss/seq_oss_init.c in the Linux kernel before 2.6.36-rc4 might allow local users to cause a denial of service or possibly have unspecified other impact via an unsuccessful attempt to open the /dev/sequencer device. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1000-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=27f7ad53829f79e799a253285318bff79ece15bd - http://www.ma
l.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=27f7ad53829f79e799a253285318bff79ece15bd - http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 - http://www.redhat.com/support/errata/RHSA-2011-0007.html - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://www.vupen.com/english/advisories/2011/0298 - https://bugzilla.redhat.com/show_bug.cgi?id=630551 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html - http://www.securityfocus.com/bid/43062 - http://secunia.com/advisories/42890 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.36-rc4 - http://www.openwall.com/lists/oss-security/2010/09/08/7
.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.36-rc4 - http://www.openwall.com/lists/oss-security/2010/09/08/7 - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html - http://git.kernel.org/?p=linux/kernel/git/tiwai/sound-2.6.git%3Ba=commit%3Bh=c598337660c21c0afaa9df5a65bb4a7a0cf15be8
CVE ID: CVE-2010-3081 State: PUBLISHED Published: 2010-09-24T19:00:00 Last Updated: 2024-08-07T02:55:46.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: The compat_alloc_user_space functions in include/asm/compat.h files in the Linux kernel before 2.6.36-rc4-git2 on 64-bit platforms do not properly allocate the userspace memory required for the 32-bit compatibility layer, which allows local users to gain privileges by leveraging the ability of the compat_mc_getsockopt function (aka the MCAST_MSFILTER getsockopt support) to control a certain length value, related to a "stack pointer underflow" issue, as exploited in the wild in September 2010. Additional Analyst Notes: - CVE Pr
ted to a "stack pointer underflow" issue, as exploited in the wild in September 2010. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2010-0017.html - http://isc.sans.edu/diary.html?storyid=9574 - http://www.vupen.com/english/advisories/2010/3083 - http://www.vupen.com/english/advisories/2010/3117 - http://sota.gen.nz/compat1/ - http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 - https://access.redhat.com/kb/docs/DOC-40265 - http://www.securityfocus.com/archive/1/514938/30/30/threaded - http://secunia.com/advisories/42384 - http://archives.neohapsis.com/archives/fulldisclosure/2010-09/0278.html - http://lists.opens