Release Date: | 2010-12-10 | |
Impact: | Moderate | What is this? |
Integer overflow in the ioc_general function in drivers/scsi/gdth.c in the Linux kernel before 2.6.36.1 on 64-bit platforms allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a large argument in an ioctl call.
See more information about CVE-2010-4157 from MITRE CVE dictionary and NIST NVD
NOTE: The following CVSS metrics and score provided are preliminary and subject to review.
Base Score: | 6.0 |
Vector String: | AV:L/AC:H/Au:S/C:C/I:C/A:C |
Version: | 2.0 |
Attack Vector: | Local |
Attack Complexity: | High |
Authentication: | Single |
Confidentiality Impact: | Complete |
Integrity Impact: | Complete |
Availability Impact: | Complete |
Platform | Errata | Release Date |
Oracle Enterprise Linux version 4 (kernel) | ELSA-2011-0162 | 2011-01-18 |
Oracle Enterprise Linux version 4 (ocfs2-2.6.9-89.35.1.0.1.EL) | ELSA-2011-0162 | 2011-01-18 |
Oracle Enterprise Linux version 4 (oracleasm-2.6.9-89.35.1.0.1.EL) | ELSA-2011-0162 | 2011-01-18 |
Oracle Linux version 5 (kernel) | ELSA-2011-0004 | 2011-01-04 |
Oracle Linux version 5 (ocfs2-2.6.18-194.32.1.0.1.el5) | ELSA-2011-0004 | 2011-01-04 |
Oracle Linux version 5 (oracleasm-2.6.18-194.32.1.0.1.el5) | ELSA-2011-0004 | 2011-01-04 |
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections: