CVE-2010-2492
High
Description
Buffer overflow in the ecryptfs_uid_hash macro in fs/ecryptfs/messaging.c in the eCryptfs subsystem in the Linux kernel before 2.6.35 might allow local users to gain privileges or cause a denial of service (system crash) via unspecified vectors.
SeverityHigh
CVSS7.8
Exploit probability38. percentile0.4%
Product
Linux Kernel
PublishedSep 8, 2010
First seenSep 8, 2010
How to fix
Update
- linux linux_kernel2.6.35 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | v < 2.6.35 | 2.6.35 |
| vmware esx | 4.0, 4.1 | — |
| avaya aura_communication_manager | 5.2 | — |
| avaya aura_presence_services | 6.0, 6.1, 6.1.1 | — |
| avaya aura_session_manager | 1.1, 5.2, 6.0 | — |
| avaya aura_system_manager | 5.2, 6.0, 6.1, 6.1.1 | — |
| avaya aura_system_platform | 1.1, 6.0 | — |
| avaya aura_voice_portal | 5.0, 5.1 | — |
| avaya iq | 5.0, 5.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.