CVEvulnerability

CVE-2010-2943

8.1 HIGH Published 2010-09-30 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-09-30
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
Weaknesses
CWE-200

Description

The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read or overwrite disk blocks that are currently assigned to an active file but were previously assigned to an unlinked file, by accessing a stale NFS filehandle.

Affected configurations

• linux linux kernel (< 2.6.35) • canonical ubuntu linux 6.06 • canonical ubuntu linux 9.10 • canonical ubuntu linux 10.04 • canonical ubuntu linux 10.10 • vmware esx 4.0 • vmware esx 4.1 • avaya aura communication manager 5.2 • avaya aura presence services 6.0 • avaya aura presence services 6.1 • avaya aura presence services 6.1.1 • avaya aura session manager 1.1 • avaya aura session manager 5.2 • avaya aura session manager 6.0 • avaya aura system manager 5.2 • avaya aura system manager 6.0 • avaya aura system manager 6.1 • avaya aura system manager 6.1.1 • avaya aura system platform 1.1 • avaya aura system platform 6.0 • avaya aura voice portal 5.0 • avaya aura voice portal 5.1 • avaya iq 5.0 • avaya iq 5.1

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References