National Cyber Awareness System

Vulnerability Summary for CVE-2010-2248

Overview

fs/cifs/cifssmb.c in the CIFS implementation in the Linux kernel before 2.6.34-rc4 allows remote attackers to cause a denial of service (panic) via an SMB response packet with an invalid CountHigh value, as demonstrated by a response from an OS/2 server, related to the CIFSSMBWrite and CIFSSMBWrite2 functions.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: BID

Name: 42242

Type: Patch Information

Hyperlink:http://www.securityfocus.com/bid/42242

External Source: REDHAT

Name: RHSA-2010:0606

Hyperlink:https://rhn.redhat.com/errata/RHSA-2010-0606.html

External Source: CONFIRM

Name: https://bugzilla.redhat.com/show_bug.cgi?id=608583

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=608583

External Source: CONFIRM

Name: http://www.vmware.com/security/advisories/VMSA-2011-0003.html

Hyperlink:http://www.vmware.com/security/advisories/VMSA-2011-0003.html

External Source: UBUNTU

Name: USN-1000-1

Hyperlink:http://www.ubuntu.com/usn/USN-1000-1

External Source: BUGTRAQ

Name: 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/516397/100/0/threaded

External Source: REDHAT

Name: RHSA-2010:0610

Hyperlink:http://www.redhat.com/support/errata/RHSA-2010-0610.html

External Source: MLIST

Name: [oss-security] 20100628 Re: CVE request - kernel: cifs: Fix a kernel BUG with remote OS/2 server

Hyperlink:http://www.openwall.com/lists/oss-security/2010/06/28/6

External Source: MLIST

Name: [oss-security] 20100628 CVE request - kernel: cifs: Fix a kernel BUG with remote OS/2 server

Hyperlink:http://www.openwall.com/lists/oss-security/2010/06/28/1

External Source: MANDRIVA

Name: MDVSA-2011:051

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2011:051

External Source: MANDRIVA

Name: MDVSA-2010:198

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2010:198

External Source: CONFIRM

Name: http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.34/ChangeLog-2.6.34-rc4

Hyperlink:http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.34/ChangeLog-2.6.34-rc4

External Source: DEBIAN

Name: DSA-2094

Hyperlink:http://www.debian.org/security/2010/dsa-2094

External Source: SECTRACK

Name: 1024285

Hyperlink:http://securitytracker.com/id?1024285

External Source: SECUNIA

Name: 43315

Hyperlink:http://secunia.com/advisories/43315

External Source: SUSE

Name: SUSE-SA:2010:060

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html

External Source: CONFIRM

Name: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=6513a81e9325d712f1bfb9a1d7b750134e49ff18

Hyperlink:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=6513a81e9325d712f1bfb9a1d7b750134e49ff18