Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2010-2943

Overview

Vulnerability Score 7.9 7.9
CVE Id CVE-2010-2943
Last Modified 19 Mar 2012 12:00:00
Published 30 Sep 2010 11:00:01
Confidentiality Impact COMPLETE COMPLETE
Integrity Impact COMPLETE COMPLETE
Availability Impact NONE NONE
Access Vector NETWORK
Access Complexity MEDIUM
Authentication SINGLE_INSTANCE

CVE-2010-2943

Summary

The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read or overwrite disk blocks that are currently assigned to an active file but were previously assigned to an unlinked file, by accessing a stale NFS filehandle.

Vulnerable Systems

Operating System

  • Linux Kernel 2.6.0

  • Linux Kernel 2.6.1

  • Linux Kernel 2.6.10

  • Linux Kernel 2.6.11

  • Linux Kernel 2.6.11.1

  • Linux Kernel 2.6.11.10

  • Linux Kernel 2.6.11.11

  • Linux Kernel 2.6.11.12

  • Linux Kernel 2.6.11.2

  • Linux Kernel 2.6.11.3

  • Linux Kernel 2.6.11.4

  • Linux Kernel 2.6.11.5

  • Linux Kernel 2.6.11.6

  • Linux Kernel 2.6.11.7

  • Linux Kernel 2.6.11.8

  • Linux Kernel 2.6.11.9

  • Linux Kernel 2.6.12

  • Linux Kernel 2.6.12.1

  • Linux Kernel 2.6.12.2

  • Linux Kernel 2.6.12.3

  • Linux Kernel 2.6.12.4

  • Linux Kernel 2.6.12.5

  • Linux Kernel 2.6.12.6

  • Linux Kernel 2.6.13

  • Linux Kernel 2.6.13.1

  • Linux Kernel 2.6.13.2

  • Linux Kernel 2.6.13.3

  • Linux Kernel 2.6.13.4

  • Linux Kernel 2.6.13.5

  • Linux Kernel 2.6.14

  • Linux Kernel 2.6.14.1

  • Linux Kernel 2.6.14.2

  • Linux Kernel 2.6.14.3

  • Linux Kernel 2.6.14.4

  • Linux Kernel 2.6.14.5

  • Linux Kernel 2.6.14.6

  • Linux Kernel 2.6.14.7

  • Linux Kernel 2.6.15

  • Linux Kernel 2.6.15.1

  • Linux Kernel 2.6.15.2

  • Linux Kernel 2.6.15.3

  • Linux Kernel 2.6.15.4

  • Linux Kernel 2.6.15.5

  • Linux Kernel 2.6.15.6

  • Linux Kernel 2.6.15.7

  • Linux Kernel 2.6.16

  • Linux Kernel 2.6.16.1

  • Linux Kernel 2.6.16.10

  • Linux Kernel 2.6.16.11

  • Linux Kernel 2.6.16.12

  • Linux Kernel 2.6.16.13

  • Linux Kernel 2.6.16.14

  • Linux Kernel 2.6.16.15

  • Linux Kernel 2.6.16.16

  • Linux Kernel 2.6.16.17

  • Linux Kernel 2.6.16.18

  • Linux Kernel 2.6.16.19

  • Linux Kernel 2.6.16.2

  • Linux Kernel 2.6.16.20

  • Linux Kernel 2.6.16.21

  • Linux Kernel 2.6.16.22

  • Linux Kernel 2.6.16.23

  • Linux Kernel 2.6.16.24

  • Linux Kernel 2.6.16.25

  • Linux Kernel 2.6.16.26

  • Linux Kernel 2.6.16.27

  • Linux Kernel 2.6.16.28

  • Linux Kernel 2.6.16.29

  • Linux Kernel 2.6.16.3

  • Linux Kernel 2.6.16.30

  • Linux Kernel 2.6.16.31

  • Linux Kernel 2.6.16.32

  • Linux Kernel 2.6.16.33

  • Linux Kernel 2.6.16.34

  • Linux Kernel 2.6.16.35

  • Linux Kernel 2.6.16.36

  • Linux Kernel 2.6.16.37

  • Linux Kernel 2.6.16.38

  • Linux Kernel 2.6.16.39

  • Linux Kernel 2.6.16.4

  • Linux Kernel 2.6.16.40

  • Linux Kernel 2.6.16.41

  • Linux Kernel 2.6.16.42

  • Linux Kernel 2.6.16.43

  • Linux Kernel 2.6.16.44

  • Linux Kernel 2.6.16.45

  • Linux Kernel 2.6.16.46

  • Linux Kernel 2.6.16.47

  • Linux Kernel 2.6.16.48

  • Linux Kernel 2.6.16.49

  • Linux Kernel 2.6.16.5

  • Linux Kernel 2.6.16.50

  • Linux Kernel 2.6.16.51

  • Linux Kernel 2.6.16.52

  • Linux Kernel 2.6.16.53

  • Linux Kernel 2.6.16.54

  • Linux Kernel 2.6.16.55

  • Linux Kernel 2.6.16.56

  • Linux Kernel 2.6.16.57

  • Linux Kernel 2.6.16.58

  • Linux Kernel 2.6.16.59

  • Linux Kernel 2.6.16.6

  • Linux Kernel 2.6.16.60

  • Linux Kernel 2.6.16.61

  • Linux Kernel 2.6.16.62

  • Linux Kernel 2.6.16.7

  • Linux Kernel 2.6.16.8

  • Linux Kernel 2.6.16.9

  • Linux Kernel 2.6.17

  • Linux Kernel 2.6.17.1

  • Linux Kernel 2.6.17.10

  • Linux Kernel 2.6.17.11

  • Linux Kernel 2.6.17.12

  • Linux Kernel 2.6.17.13

  • Linux Kernel 2.6.17.14

  • Linux Kernel 2.6.17.2

  • Linux Kernel 2.6.17.3

  • Linux Kernel 2.6.17.4

  • Linux Kernel 2.6.17.5

  • Linux Kernel 2.6.17.6

  • Linux Kernel 2.6.17.7

  • Linux Kernel 2.6.17.8

  • Linux Kernel 2.6.17.9

  • Linux Kernel 2.6.18

  • Linux Kernel 2.6.18.1

  • Linux Kernel 2.6.18.2

  • Linux Kernel 2.6.18.3

  • Linux Kernel 2.6.18.4

  • Linux Kernel 2.6.18.5

  • Linux Kernel 2.6.18.6

  • Linux Kernel 2.6.18.7

  • Linux Kernel 2.6.18.8

  • Linux Kernel 2.6.19

  • Linux Kernel 2.6.19.1

  • Linux Kernel 2.6.19.2

  • Linux Kernel 2.6.19.3

  • Linux Kernel 2.6.19.4

  • Linux Kernel 2.6.19.5

  • Linux Kernel 2.6.19.6

  • Linux Kernel 2.6.19.7

  • Linux Kernel 2.6.2

  • Linux Kernel 2.6.20

  • Linux Kernel 2.6.20.1

  • Linux Kernel 2.6.20.10

  • Linux Kernel 2.6.20.11

  • Linux Kernel 2.6.20.12

  • Linux Kernel 2.6.20.13

  • Linux Kernel 2.6.20.14

  • Linux Kernel 2.6.20.15

  • Linux Kernel 2.6.20.16

  • Linux Kernel 2.6.20.17

  • Linux Kernel 2.6.20.18

  • Linux Kernel 2.6.20.19

  • Linux Kernel 2.6.20.2

  • Linux Kernel 2.6.20.20

  • Linux Kernel 2.6.20.21

  • Linux Kernel 2.6.20.3

  • Linux Kernel 2.6.20.4

  • Linux Kernel 2.6.20.5

  • Linux Kernel 2.6.20.6

  • Linux Kernel 2.6.20.7

  • Linux Kernel 2.6.20.8

  • Linux Kernel 2.6.20.9

  • Linux Kernel 2.6.21

  • Linux Kernel 2.6.21.1

  • Linux Kernel 2.6.21.2

  • Linux Kernel 2.6.21.3

  • Linux Kernel 2.6.21.4

  • Linux Kernel 2.6.21.5

  • Linux Kernel 2.6.21.6

  • Linux Kernel 2.6.21.7

  • Linux Kernel 2.6.22

  • Linux Kernel 2.6.22.1

  • Linux Kernel 2.6.22.10

  • Linux Kernel 2.6.22.11

  • Linux Kernel 2.6.22.12

  • Linux Kernel 2.6.22.13

  • Linux Kernel 2.6.22.14

  • Linux Kernel 2.6.22.15

  • Linux Kernel 2.6.22.16

  • Linux Kernel 2.6.22.17

  • Linux Kernel 2.6.22.18

  • Linux Kernel 2.6.22.19

  • Linux Kernel 2.6.22.2

  • Linux Kernel 2.6.22.20

  • Linux Kernel 2.6.22.21

  • Linux Kernel 2.6.22.22

  • Linux Kernel 2.6.22.3

  • Linux Kernel 2.6.22.4

  • Linux Kernel 2.6.22.5

  • Linux Kernel 2.6.22.6

  • Linux Kernel 2.6.22.7

  • Linux Kernel 2.6.22.8

  • Linux Kernel 2.6.22.9

  • Linux Kernel 2.6.23

  • Linux Kernel 2.6.23.1

  • Linux Kernel 2.6.23.10

  • Linux Kernel 2.6.23.11

  • Linux Kernel 2.6.23.12

  • Linux Kernel 2.6.23.13

  • Linux Kernel 2.6.23.14

  • Linux Kernel 2.6.23.15

  • Linux Kernel 2.6.23.16

  • Linux Kernel 2.6.23.17

  • Linux Kernel 2.6.23.2

  • Linux Kernel 2.6.23.3

  • Linux Kernel 2.6.23.4

  • Linux Kernel 2.6.23.5

  • Linux Kernel 2.6.23.6

  • Linux Kernel 2.6.23.7

  • Linux Kernel 2.6.23.8

  • Linux Kernel 2.6.23.9

  • Linux Kernel 2.6.24

  • Linux Kernel 2.6.24.1

  • Linux Kernel 2.6.24.2

  • Linux Kernel 2.6.24.3

  • Linux Kernel 2.6.24.4

  • Linux Kernel 2.6.24.5

  • Linux Kernel 2.6.24.6

  • Linux Kernel 2.6.24.7

  • Linux Kernel 2.6.25

  • Linux Kernel 2.6.25.1

  • Linux Kernel 2.6.25.10

  • Linux Kernel 2.6.25.11

  • Linux Kernel 2.6.25.12

  • Linux Kernel 2.6.25.13

  • Linux Kernel 2.6.25.14

  • Linux Kernel 2.6.25.15

  • Linux Kernel 2.6.25.16

  • Linux Kernel 2.6.25.17

  • Linux Kernel 2.6.25.18

  • Linux Kernel 2.6.25.19

  • Linux Kernel 2.6.25.2

  • Linux Kernel 2.6.25.20

  • Linux Kernel 2.6.25.3

  • Linux Kernel 2.6.25.4

  • Linux Kernel 2.6.25.5

  • Linux Kernel 2.6.25.6

  • Linux Kernel 2.6.25.7

  • Linux Kernel 2.6.25.8

  • Linux Kernel 2.6.25.9

  • Linux Kernel 2.6.26

  • Linux Kernel 2.6.26.1

  • Linux Kernel 2.6.26.2

  • Linux Kernel 2.6.26.3

  • Linux Kernel 2.6.26.4

  • Linux Kernel 2.6.26.5

  • Linux Kernel 2.6.26.6

  • Linux Kernel 2.6.26.7

  • Linux Kernel 2.6.26.8

  • Linux Kernel 2.6.27

  • Linux Kernel 2.6.27.10

  • Linux Kernel 2.6.27.11

  • Linux Kernel 2.6.27.12

  • Linux Kernel 2.6.27.20

  • Linux Kernel 2.6.27.22

  • Linux Kernel 2.6.27.23

  • Linux Kernel 2.6.27.24

  • Linux Kernel 2.6.27.33

  • Linux Kernel 2.6.27.34

  • Linux Kernel 2.6.27.35

  • Linux Kernel 2.6.27.36

  • Linux Kernel 2.6.27.37

  • Linux Kernel 2.6.27.5

  • Linux Kernel 2.6.27.6

  • Linux Kernel 2.6.27.7

  • Linux Kernel 2.6.27.8

  • Linux Kernel 2.6.27.9

  • Linux Kernel 2.6.28

  • Linux Kernel 2.6.28.1

  • Linux Kernel 2.6.28.10

  • Linux Kernel 2.6.28.2

  • Linux Kernel 2.6.28.3

  • Linux Kernel 2.6.28.4

  • Linux Kernel 2.6.28.5

  • Linux Kernel 2.6.28.6

  • Linux Kernel 2.6.28.7

  • Linux Kernel 2.6.28.8

  • Linux Kernel 2.6.28.9

  • Linux Kernel 2.6.29

  • Linux Kernel 2.6.29.1

  • Linux Kernel 2.6.29.2

  • Linux Kernel 2.6.29.3

  • Linux Kernel 2.6.29.4

  • Linux Kernel 2.6.29.5

  • Linux Kernel 2.6.29.6

  • Linux Kernel 2.6.3

  • Linux Kernel 2.6.30

  • Linux Kernel 2.6.30.1

  • Linux Kernel 2.6.30.10

  • Linux Kernel 2.6.30.2

  • Linux Kernel 2.6.30.3

  • Linux Kernel 2.6.30.4

  • Linux Kernel 2.6.30.5

  • Linux Kernel 2.6.30.6

  • Linux Kernel 2.6.30.7

  • Linux Kernel 2.6.30.8

  • Linux Kernel 2.6.30.9

  • Linux Kernel 2.6.31

  • Linux Kernel 2.6.31.1

  • Linux Kernel 2.6.31.10

  • Linux Kernel 2.6.31.11

  • Linux Kernel 2.6.31.12

  • Linux Kernel 2.6.31.13

  • Linux Kernel 2.6.31.14

  • Linux Kernel 2.6.31.2

  • Linux Kernel 2.6.31.3

  • Linux Kernel 2.6.31.4

  • Linux Kernel 2.6.31.5

  • Linux Kernel 2.6.31.6

  • Linux Kernel 2.6.31.7

  • Linux Kernel 2.6.31.8

  • Linux Kernel 2.6.31.9

  • Linux Kernel 2.6.32

  • Linux Kernel 2.6.32.1

  • Linux Kernel 2.6.32.10

  • Linux Kernel 2.6.32.11

  • Linux Kernel 2.6.32.12

  • Linux Kernel 2.6.32.13

  • Linux Kernel 2.6.32.14

  • Linux Kernel 2.6.32.15

  • Linux Kernel 2.6.32.16

  • Linux Kernel 2.6.32.17

  • Linux Kernel 2.6.32.18

  • Linux Kernel 2.6.32.19

  • Linux Kernel 2.6.32.2

  • Linux Kernel 2.6.32.20

  • Linux Kernel 2.6.32.3

  • Linux Kernel 2.6.32.4

  • Linux Kernel 2.6.32.5

  • Linux Kernel 2.6.32.6

  • Linux Kernel 2.6.32.7

  • Linux Kernel 2.6.32.8

  • Linux Kernel 2.6.32.9

  • Linux Kernel 2.6.33

  • Linux Kernel 2.6.33.1

  • Linux Kernel 2.6.33.2

  • Linux Kernel 2.6.33.3

  • Linux Kernel 2.6.33.4

  • Linux Kernel 2.6.33.5

  • Linux Kernel 2.6.33.6

  • Linux Kernel 2.6.33.7

  • Linux Kernel 2.6.34

  • Linux Kernel 2.6.34.1

  • Linux Kernel 2.6.34.2

  • Linux Kernel 2.6.34.3

  • Linux Kernel 2.6.34.4

  • Linux Kernel 2.6.34.5

  • Linux Kernel 2.6.34.6

  • Linux Kernel 2.6.34.7

  • Linux Kernel 2.6.4

  • Linux Kernel 2.6.5

  • Linux Kernel 2.6.6

  • Linux Kernel 2.6.7

  • Linux Kernel 2.6.8

  • Linux Kernel 2.6.8.1

  • Linux Kernel 2.6.9


References

CONFIRM - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=7124fe0a5b619d65b739477b3b55a20bf805b06d

CONFIRM - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=1920779e67cbf5ea8afef317777c5bf2b8096188

CONFIRM - https://bugzilla.redhat.com/show_bug.cgi?id=624923

VUPEN - ADV-2011-0280

VUPEN - ADV-2011-0070

CONFIRM - http://www.vmware.com/security/advisories/VMSA-2011-0012.html

UBUNTU - USN-1057-1

UBUNTU - USN-1041-1

BID - 42527

BUGTRAQ - 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console

REDHAT - RHSA-2010:0723

MLIST - [oss-security] 20100819 Re: CVE request - kernel: xfs: stale data exposure

MLIST - [oss-security] 20100818 CVE request - kernel: xfs: stale data exposure

CONFIRM - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35

CONFIRM - http://support.avaya.com/css/P8/documents/100113326

SECUNIA - 46397

SECUNIA - 43161

SECUNIA - 42758

MLIST - [xfs] 20100618 Re: [PATCH] xfsqa: test open_by_handle() on unlinked and freed inode clusters V2

MLIST - [xfs] 20100617 [PATCH] xfsqa: test open_by_handle() on unlinked and freed inode clusters V2

CONFIRM - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=7b6259e7a83647948fa33a736cc832310c8d85aa

MLIST - [linux-xfs] 20100620 [PATCH 2/4] xfs: validate untrusted inode numbers during lookup

MLIST - [linux-xfs] 20100620 [PATCH 4/4] xfs: remove block number from inode lookup code

MLIST - [linux-xfs] 20100620 [PATCH 3/4] xfs: rename XFS_IGET_BULKSTAT to XFS_IGET_UNTRUSTED

MLIST - [linux-xfs] 20100620 [PATCH 0/4, V2] xfs: validate inode numbers in file handles correctly


Last Updated: 27 May 2016 11:00:02