CVEvulnerability

CVE-2010-2526

4.6 MEDIUM Published 2010-08-05 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-08-05
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-287

Description

The cluster logical volume manager daemon (clvmd) in lvm2-cluster in LVM2 before 2.02.72, as used in Red Hat Global File System (GFS) and other products, does not verify client credentials upon a socket connection, which allows local users to cause a denial of service (daemon exit or logical-volume change) or possibly have unspecified other impact via crafted control commands.

Affected configurations

• heinz mauelshagen lvm2 (<= 2.02.71) • heinz mauelshagen lvm2 2.02.50 • heinz mauelshagen lvm2 2.02.51 • heinz mauelshagen lvm2 2.02.52 • heinz mauelshagen lvm2 2.02.53 • heinz mauelshagen lvm2 2.02.54 • heinz mauelshagen lvm2 2.02.55 • heinz mauelshagen lvm2 2.02.56 • heinz mauelshagen lvm2 2.02.57 • heinz mauelshagen lvm2 2.02.58 • heinz mauelshagen lvm2 2.02.59 • heinz mauelshagen lvm2 2.02.60 • heinz mauelshagen lvm2 2.02.61 • heinz mauelshagen lvm2 2.02.62 • heinz mauelshagen lvm2 2.02.63 • heinz mauelshagen lvm2 2.02.64 • heinz mauelshagen lvm2 2.02.65 • heinz mauelshagen lvm2 2.02.66 • heinz mauelshagen lvm2 2.02.67 • heinz mauelshagen lvm2 2.02.68 • heinz mauelshagen lvm2 2.02.69 • heinz mauelshagen lvm2 2.02.70

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References