CVE-2010-4650
Published: 12 January 2012
Buffer overflow in the fuse_do_ioctl function in fs/fuse/file.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service or possibly have unspecified other impact by leveraging the ability to operate a CUSE server.
From the Ubuntu security team
An error was discovered in the kernel's handling of CUSE (Character device in Userspace). A local attacker might exploit this flaw to escalate privilege, if access to /dev/cuse has been modified to allow non-root users.
Priority
Medium
Status
| Package | Release | Status |
|---|---|---|
|
linux Launchpad, Ubuntu, Debian |
Upstream |
Released
(2.6.37~rc6)
|
|
Patches: Introduced by 59efec7b903987dcb60b9ebc85c7acd4443a11a1 Fixed by 7572777eef78ebdee1ecb7c258c0ef94d35bad16 |
||
|
linux-armadaxp Launchpad, Ubuntu, Debian |
Upstream |
Released
(2.6.37~rc6)
|
|
linux-ec2 Launchpad, Ubuntu, Debian |
Upstream |
Released
(2.6.37~rc6)
|
|
linux-fsl-imx51 Launchpad, Ubuntu, Debian |
Upstream |
Released
(2.6.37~rc6)
|
|
linux-lts-backport-maverick Launchpad, Ubuntu, Debian |
Upstream |
Released
(2.6.37~rc6)
|
|
linux-lts-backport-natty Launchpad, Ubuntu, Debian |
Upstream |
Released
(2.6.37~rc6)
|
|
linux-lts-backport-oneiric Launchpad, Ubuntu, Debian |
Upstream |
Released
(2.6.37~rc6)
|
|
linux-mvl-dove Launchpad, Ubuntu, Debian |
Upstream |
Released
(2.6.37~rc6)
|
|
linux-ti-omap4 Launchpad, Ubuntu, Debian |
Upstream |
Released
(2.6.37~rc6)
|
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4650
- https://ubuntu.com/security/notices/USN-1080-2
- https://ubuntu.com/security/notices/USN-1080-1
- https://ubuntu.com/security/notices/USN-1081-1
- https://ubuntu.com/security/notices/USN-1093-1
- https://ubuntu.com/security/notices/USN-1394-1
- https://ubuntu.com/security/notices/USN-1187-1
- NVD
- Launchpad
- Debian