Attacker Value

Unknown

(0 users assessed)

Exploitability

Unknown

(0 users assessed)

User Interaction

Unknown

Privileges Required

Unknown

Attack Vector

Unknown

0

CVE-2010-0415

Disclosure Date: February 17, 2010 •

Description

The do_pages_move function in mm/migrate.c in the Linux kernel before 2.6.33-rc7 does not validate node values, which allows local users to read arbitrary kernel memory locations, cause a denial of service (OOPS), and possibly have unspecified other impact by specifying a node that is not part of the kernel’s node set.

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics

Data provided by the National Vulnerability Database (NVD)

Base Score:

None

Impact Score:

Unknown

Exploitability Score:

Unknown

Vector:

Attack Vector (AV):

Unknown

Attack Complexity (AC):

Unknown

Privileges Required (PR):

Unknown

User Interaction (UI):

Unknown

Scope (S):

Unknown

Confidentiality (C):

Unknown

Integrity (I):

Unknown

Availability (A):

Unknown

Vendors

linux

Products

References

Canonical

CVE-2010-0415 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0415)

BID-38144 (http://www.securityfocus.com/bid/38144)

Advisory

[oss-security] 20100207 Re: CVE request: information leak / potential crash in sys_move_pages (http://www.openwall.com/lists/oss-security/2010/02/07/2)

http://git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=6f5a55f1a6c5abee15a0e878e5c74d9f1569b8b0

USN-914-1 (http://www.ubuntu.com/usn/USN-914-1)

http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.33-rc7

ADV-2010-0638 (http://www.vupen.com/english/advisories/2010/0638)

SECUNIA-38557 (http://secunia.com/advisories/38557)

http://www.redhat.com/support/errata/RHSA-2010-0147.html

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9399

FEDORA-2010-1804 (http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035070.html)

http://www.mandriva.com/security/advisories?name=MDVSA-2010:198

SECUNIA-38779 (http://secunia.com/advisories/38779)

http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html

[oss-security] 20100207 CVE request: information leak / potential crash in sys_move_pages (http://www.openwall.com/lists/oss-security/2010/02/07/1)

SECUNIA-38922 (http://secunia.com/advisories/38922)

http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00006.html

DSA-1996 (http://www.debian.org/security/2010/dsa-1996)

FEDORA-2010-1787 (http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035159.html)

SECUNIA-43315 (http://secunia.com/advisories/43315)

http://www.mandriva.com/security/advisories?name=MDVSA-2010:066

SECUNIA-39033 (http://secunia.com/advisories/39033)

http://www.vmware.com/security/advisories/VMSA-2011-0003.html

[oss-security] 20100208 Re: CVE request: information leak / potential crash in sys_move_pages (http://www.openwall.com/lists/oss-security/2010/02/08/2)

DSA-2005 (http://www.debian.org/security/2010/dsa-2005)

20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX (http://www.securityfocus.com/archive/1/516397/100/0/threaded)

SECUNIA-38492 (http://secunia.com/advisories/38492)

https://bugzilla.redhat.com/show_bug.cgi?id=562582

http://www.redhat.com/support/errata/RHSA-2010-0161.html

Miscellaneous

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6f5a55f1a6c5abee15a0e878e5c74d9f1569b8b0

Rapid7

Technical Analysis