deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-3211
Published: 2010-09-03
Description: Multiple SQL injection vulnerabilities in the JE FAQ Pro (com_jefaqpro) component 1.5.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via category categorylist operations with (1) the catid parameter or (2) the catid parameter in a lists action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/41078; http://www.exploit-db.com/exploits/14846; https://exchange.xforce.ibmcloud.com/vulnerabilities/61485
CVE: CVE-2010-3212
Published: 2010-09-03
Description: SQL injection vulnerability in index.php in Seagull 0.6.7 and earlier allows remote attackers to execute arbitrary SQL commands via the frmQuestion parameter in a retrieve action, in conjunction with a user/password PATH_INFO.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/67689; http://packetstormsecurity.org/1008-exploits/seagull-sql.txt; http://secunia.com/advisories/41169
CVE: CVE-2010-1325
Published: 2010-09-03
Description: Cross-site request forgery (CSRF) vulnerability in the apache2-slms package in SUSE Lifecycle Management Server (SLMS) 1.0 on SUSE Linux Enterprise (SLE) 11 allows remote attackers to hijack the authentication of unspecified victims via vectors related to improper parameter quoting.  NOTE: some sources report that this is a vulnerability in a product named "Apache SLMS," but that is incorrect.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html; http://support.novell.com/security/cve/CVE-2010-1325.html; http://www.securityfocus.com/bid/42121
CVE: CVE-2010-1507
Published: 2010-09-03
Description: WebYaST in yast2-webclient in SUSE Linux Enterprise (SLE) 11 on the WebYaST appliance uses a fixed secret key that is embedded in the appliance's image, which allows remote attackers to spoof session cookies by leveraging knowledge of this key.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-255
References: http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html; http://support.novell.com/security/cve/CVE-2010-1507.html; http://www.securityfocus.com/bid/42128
CVE: CVE-2010-2226
Published: 2010-09-03
Description: The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux kernel before 2.6.35 does not properly check the file descriptors passed to the SWAPEXT ioctl, which allows local users to leverage write access and obtain read access by swapping one file into another file.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://archives.free.net.ph/message/20[PII_REDACTED]10.301704aa.en.html; http://archives.free.net.ph/message/20[PII_REDACTED]35.40f53a32.en.html; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1817176a86352f65210139d4c794ad2d19fc6b63
CVE: CVE-2010-2240
Published: 2010-09-03
Description: The do_anonymous_page function in mm/memory.c in the Linux kernel before 2.6.27.52, 2.6.32.x before 2.6.32.19, 2.6.34.x before 2.6.34.4, and 2.6.35.x before 2.6.35.2 does not properly separate the stack and the heap, which allows context-dependent attackers to execute arbitrary code by writing to the bottom page of a shared memory segment, as demonstrated by a memory-exhaustion attack against the X.Org X server.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=320b2b8de[PII_REDACTED]ebbc1a17165727f4c893; http://lists.vmware.com/pipermail/security-announce/2011/000133.html; http://securitytracker.com/id?1024344
CVE: CVE-2010-2532
Published: 2010-09-03
Description: lxsession-logout in lxsession in LXDE, as used on SUSE openSUSE 11.3 and other platforms, does not lock the screen when the Suspend or Hibernate button is pressed, which might make it easier for physically proximate attackers to access an unattended laptop via a resume action. NOTE: there is no general agreement that this is a vulnerability, because separate control over locking can be an equally secure, or more secure, behavior in some threat environments.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html; http://www.openwall.com/lists/oss-security/2010/07/15/1; http://www.openwall.com/lists/oss-security/2010/07/16/4
CVE: CVE-2010-2954
Published: 2010-09-03
Description: The irda_bind function in net/irda/af_irda.c in the Linux kernel before 2.6.36-rc3-next-20100901 does not properly handle failure of the irda_open_tsap function, which allows local users to cause a denial of service (NULL pointer dereference and panic) and possibly have unspecified other impact via multiple unsuccessful calls to bind on an AF_IRDA (aka PF_IRDA) socket.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-476
References: http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=628e300cccaa628d8fb92aa28cb7530a3d5f2257; http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html; http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html
CVE: CVE-2009-4898
Published: 2010-09-07
Description: Cross-site request forgery (CSRF) vulnerability in TWiki before 4.3.2 allows remote attackers to hijack the authentication of arbitrary users for requests that update pages, as demonstrated by a URL for a save script in the ACTION attribute of a FORM element, in conjunction with a call to the submit method in the onload attribute of a BODY element.  NOTE: this issue exists because of an insufficient fix for CVE-2009-1339.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://twiki.org/cgi-bin/view/Codev/SecurityAuditTokenBasedCsrfFix; http://www.openwall.com/lists/oss-security/2010/08/02/17; http://www.openwall.com/lists/oss-security/2010/08/03/8
CVE: CVE-2010-2248
Published: 2010-09-07
Description: fs/cifs/cifssmb.c in the CIFS implementation in the Linux kernel before 2.6.34-rc4 allows remote attackers to cause a denial of service (panic) via an SMB response packet with an invalid CountHigh value, as demonstrated by a response from an OS/2 server, related to the CIFSSMBWrite and CIFSSMBWrite2 functions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6513a81e9325d712f1bfb9a1d7b750134e49ff18; http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html; http://secunia.com/advisories/43315
CVE: CVE-2010-2521
Published: 2010-09-07
Description: Multiple buffer overflows in fs/nfsd/nfs4xdr.c in the XDR implementation in the NFS server in the Linux kernel before 2.6.34-rc6 allow remote attackers to cause a denial of service (panic) or possibly execute arbitrary code via a crafted NFSv4 compound WRITE request, related to the read_buf and nfsd4_decode_compound functions.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2bc3c1179c781b359d4f2f3439cb3df72afc17fc; http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html; http://secunia.com/advisories/43315
CVE: CVE-2010-2802
Published: 2010-09-07
Description: Cross-site scripting (XSS) vulnerability in MantisBT before 1.2.2 allows remote authenticated users to inject arbitrary web script or HTML via an HTML document with a .gif filename extension, related to inline attachments.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://www.mantisbt.org/blog/?p=113; http://www.mantisbt.org/bugs/view.php?id=11952; http://www.openwall.com/lists/oss-security/2010/08/02/16
CVE: CVE-2006-7240
Published: 2010-09-07
Description: gnome-power-manager 2.14.0 does not properly implement the lock_on_suspend and lock_on_hibernate settings for locking the screen when the suspend or hibernate button is pressed, which might make it easier for physically proximate attackers to access an unattended laptop via a resume action, a related issue to CVE-2010-2532.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: https://bugs.launchpad.net/ubuntu/+source/gnome-power-manager/+bug/42052; https://bugs.launchpad.net/ubuntu/+source/gnome-power-manager/+bug/42052
CVE: CVE-2009-4996
Published: 2010-09-07
Description: Xfce4-session 4.5.91 in Xfce does not lock the screen when the suspend or hibernate button is pressed, which might make it easier for physically proximate attackers to access an unattended laptop via a resume action, a related issue to CVE-2010-2532.  NOTE: there is no general agreement that this is a vulnerability, because separate control over locking can be an equally secure, or more secure, behavior in some threat environments
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://bugzilla.xfce.org/show_bug.cgi?id=4805; https://bugzilla.redhat.com/show_bug.cgi?id=525395; https://bugzilla.redhat.com/show_bug.cgi?id=587633
CVE: CVE-2009-4997
Published: 2010-09-07
Description: gnome-power-manager 2.27.92 does not properly implement the lock_on_suspend and lock_on_hibernate settings for locking the screen when the suspend or hibernate button is pressed, which might make it easier for physically proximate attackers to access an unattended laptop via a resume action, a related issue to CVE-2010-2532.  NOTE: this issue exists because of a regression that followed a gnome-power-manager fix a few years earlier.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: https://bugs.launchpad.net/ubuntu/+source/gnome-power-manager/+bug/42052; https://bugs.launchpad.net/ubuntu/+source/gnome-power-manager/+bug/428115; https://bugs.launchpad.net/ubuntu/+source/gnome-power-manager/+bug/42052
CVE: CVE-2010-2739
Published: 2010-09-07
Description: Buffer overflow in the CreateDIBPalette function in win32k.sys in Microsoft Windows XP SP3, Server 2003 R2 Enterprise SP2, Vista Business SP1, Windows 7, and Server 2008 SP2 allows local users to cause a denial of service (crash) and possibly execute arbitrary code by performing a clipboard operation (GetClipboardData API function) with a crafted bitmap with a palette that contains a large number of colors.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://blogs.technet.com/b/msrc/archive/2010/08/10/update-on-the-publicly-disclosed-win32k-sys-eop-vulnerability.aspx; http://secunia.com/advisories/40870; http://www.ragestorm.net/blogs/?p=255
CVE: CVE-2010-2874
Published: 2010-09-07
Description: Unspecified vulnerability in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to execute arbitrary code via unknown vectors that trigger memory corruption.  NOTE: due to conflicting information and use of the same CVE identifier by the vendor, ZDI, and TippingPoint, it is not clear whether this issue is related to use of an uninitialized pointer, an incorrect pointer offset calculation, or both.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.adobe.com/support/security/bulletins/apsb10-20.html; http://www.securitytracker.com/id?1024361; http://www.vupen.com/english/advisories/2010/2176
CVE: CVE-2010-3213
Published: 2010-09-07
Description: Cross-site request forgery (CSRF) vulnerability in Microsoft Outlook Web Access (owa/ev.owa) 2007 through SP2 allows remote attackers to hijack the authentication of e-mail users for requests that perform Outlook requests, as demonstrated by setting the auto-forward rule.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://sites.google.com/site/tentacoloviola/pwning-corporate-webmails; http://www.exploit-db.com/exploits/14285; http://www.securityfocus.com/bid/41462
CVE: CVE-2010-3244
Published: 2010-09-07
Description: BbtsConnection_Edit.exe in Blackboard Transact Suite (formerly Blackboard Commerce Suite) before 3.6.0.2 relies on field names when determining whether it is appropriate to decrypt a connection.xml field value, which allows local users to discover the database password via a modified connection.xml file that contains an encrypted password in the <Server> field.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-200
References: http://www.kb.cert.org/vuls/id/204055; http://www.kb.cert.org/vuls/id/MAPG-86YPVM; http://www.kb.cert.org/vuls/id/204055
CVE: CVE-2010-3245
Published: 2010-09-07
Description: The automated-backup functionality in Blackboard Transact Suite (formerly Blackboard Commerce Suite) stores the (1) database username and (2) database password in cleartext in (a) script and (b) batch (.bat) files, which allows local users to obtain sensitive information by reading a file.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://www.kb.cert.org/vuls/id/204055; http://www.kb.cert.org/vuls/id/MAPG-86YPVM; http://www.kb.cert.org/vuls/id/204055
CVE: CVE-2010-3246
Published: 2010-09-07
Description: Google Chrome before 6.0.472.53 does not properly handle the _blank value for the target attribute of unspecified elements, which allows remote attackers to bypass the pop-up blocker via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://code.google.com/p/chromium/issues/detail?id=34414; http://googlechromereleases.blogspot.com/2010/09/stable-and-beta-channel-updates.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11752
CVE: CVE-2010-3247
Published: 2010-09-07
Description: Google Chrome before 6.0.472.53 does not properly restrict the characters in URLs, which allows remote attackers to spoof the appearance of the URL bar via homographic sequences.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=37201; http://googlechromereleases.blogspot.com/2010/09/stable-and-beta-channel-updates.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12176
CVE: CVE-2010-3248
Published: 2010-09-07
Description: Google Chrome before 6.0.472.53 does not properly restrict copying to the clipboard, which has unspecified impact and attack vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://code.google.com/p/chromium/issues/detail?id=41654; http://googlechromereleases.blogspot.com/2010/09/stable-and-beta-channel-updates.html; http://secunia.com/advisories/41856
CVE: CVE-2010-3249
Published: 2010-09-07
Description: Google Chrome before 6.0.472.53 does not properly implement SVG filters, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, related to a "stale pointer" issue.
CVSS Score: 9.3 (HIGH)
References: http://code.google.com/p/chromium/issues/detail?id=45659; http://googlechromereleases.blogspot.com/2010/09/stable-and-beta-channel-updates.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12211
CVE: CVE-2010-3250
Published: 2010-09-07
Description: Unspecified vulnerability in Google Chrome before 6.0.472.53 allows remote attackers to enumerate the set of installed extensions via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://code.google.com/p/chromium/issues/detail?id=45876; http://googlechromereleases.blogspot.com/2010/09/stable-and-beta-channel-updates.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12106
CVE: CVE-2010-3251
Published: 2010-09-07
Description: The WebSockets implementation in Google Chrome before 6.0.472.53 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-476
References: http://code.google.com/p/chromium/issues/detail?id=46750; http://code.google.com/p/chromium/issues/detail?id=51846; http://googlechromereleases.blogspot.com/2010/09/stable-and-beta-channel-updates.html
CVE: CVE-2010-3252
Published: 2010-09-07
Description: Use-after-free vulnerability in the Notifications presenter in Google Chrome before 6.0.472.53 allows attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=50386; http://googlechromereleases.blogspot.com/2010/09/stable-and-beta-channel-updates.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11987
CVE: CVE-2010-3253
Published: 2010-09-07
Description: The implementation of notification permissions in Google Chrome before 6.0.472.53 allows attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://code.google.com/p/chromium/issues/detail?id=50839; http://googlechromereleases.blogspot.com/2010/09/stable-and-beta-channel-updates.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11480
CVE: CVE-2010-3254
Published: 2010-09-07
Description: The WebSockets implementation in Google Chrome before 6.0.472.53 does not properly handle integer values, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-190
References: http://code.google.com/p/chromium/issues/detail?id=51630; http://code.google.com/p/chromium/issues/detail?id=51739; http://googlechromereleases.blogspot.com/2010/09/stable-and-beta-channel-updates.html
CVE: CVE-2010-3255
Published: 2010-09-07
Description: Google Chrome before 6.0.472.53 and webkitgtk before 1.2.6 do not properly handle counter nodes, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://code.google.com/p/chromium/issues/detail?id=51653; http://googlechromereleases.blogspot.com/2010/09/stable-and-beta-channel-updates.html; http://secunia.com/advisories/43086
CVE: CVE-2010-3256
Published: 2010-09-07
Description: Google Chrome before 6.0.472.53 does not properly limit the number of stored autocomplete entries, which has unspecified impact and attack vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://code.google.com/p/chromium/issues/detail?id=51727; http://googlechromereleases.blogspot.com/2010/09/stable-and-beta-channel-updates.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12027
CVE: CVE-2010-3257
Published: 2010-09-07
Description: Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving element focus.
CVSS Score: 9.3 (HIGH)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=52443; http://googlechromereleases.blogspot.com/2010/09/stable-and-beta-channel-updates.html; http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html
CVE: CVE-2010-3258
Published: 2010-09-07
Description: The sandbox implementation in Google Chrome before 6.0.472.53 does not properly deserialize parameters, which has unspecified impact and remote attack vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-502
References: http://code.google.com/p/chromium/issues/detail?id=52682; http://googlechromereleases.blogspot.com/2010/09/stable-and-beta-channel-updates.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12133
CVE: CVE-2010-3259
Published: 2010-09-07
Description: WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, does not properly restrict read access to images derived from CANVAS elements, which allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive image data via a crafted web site.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://code.google.com/p/chromium/issues/detail?id=53001; http://googlechromereleases.blogspot.com/2010/09/stable-and-beta-channel-updates.html; http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html
CVE: CVE-2009-4895
Published: 2010-09-08
Description: Race condition in the tty_fasync function in drivers/char/tty_io.c in the Linux kernel before 2.6.32.6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via unknown vectors, related to the put_tty_queue and __f_setown functions.  NOTE: the vulnerability was addressed in a different way in 2.6.32.9.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-476
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=[PII_REDACTED]69f9f8960d356676662d3db5a9d116; http://www.debian.org/security/2010/dsa-2094; http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.6
CVE: CVE-2010-2066
Published: 2010-09-08
Description: The mext_check_arguments function in fs/ext4/move_extent.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a MOVE_EXT ioctl call that specifies this file as a donor.
CVSS Score: 5.5 (MEDIUM)
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1f5a81e41f8b1a782c68d3843e9ec1bfaadf7d72; http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00000.html; http://secunia.com/advisories/43315
CVE: CVE-2010-2492
Published: 2010-09-08
Description: Buffer overflow in the ecryptfs_uid_hash macro in fs/ecryptfs/messaging.c in the eCryptfs subsystem in the Linux kernel before 2.6.35 might allow local users to gain privileges or cause a denial of service (system crash) via unspecified vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a6f80fb7b5986fda663d94079d3bba0937a6b6ff; http://secunia.com/advisories/42890; http://secunia.com/advisories/46397
CVE: CVE-2010-2495
Published: 2010-09-08
Description: The pppol2tp_xmit function in drivers/net/pppol2tp.c in the L2TP implementation in the Linux kernel before 2.6.34 does not properly validate certain values associated with an interface, which allows attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via vectors related to a routing change.
CVSS Score: 10.0 (HIGH)
CWE: CWE-476
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3feec9095d12e311b7d4eb7fe7e5dfa75d4a72a5; http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00000.html; http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34
CVE: CVE-2010-2524
Published: 2010-09-08
Description: The DNS resolution functionality in the CIFS implementation in the Linux kernel before 2.6.35, when CONFIG_CIFS_DFS_UPCALL is enabled, relies on a user's keyring for the dns_resolver upcall in the cifs.upcall userspace helper, which allows local users to spoof the results of DNS queries and perform arbitrary CIFS mounts via vectors involving an add_key call, related to a "cache stuffing" issue and MS-DFS referrals.
CVSS Score: 7.8 (HIGH)
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4c0c03ca54f72fdd5912516ad0a23ec5cf01bda7; http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html; http://marc.info/?l=oss-security&m=[PII_REDACTED]1700&w=2
CVE: CVE-2010-2798
Published: 2010-09-08
Description: The gfs2_dirent_find_space function in fs/gfs2/dir.c in the Linux kernel before 2.6.35 uses an incorrect size value in calculations associated with sentinel directory entries, which allows local users to cause a denial of service (NULL pointer dereference and panic) and possibly have unspecified other impact by renaming a file in a GFS2 filesystem, related to the gfs2_rename function in fs/gfs2/ops_inode.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=728a756b8fcd22d80e2dbba8117a8a3aafd3f203; http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html