CVE-2010-4529
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2010-4529
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Integer underflow in the irda_getsockopt function in net/irda/af_irda.c in the Linux kernel before 2.6.37 on platforms other than x86 allows local users to obtain potentially sensitive information from kernel heap memory via an IRLMP_ENUMDEVICES getsockopt call.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux Kernel net/irda/af_irda.c文件irda_getsockopt函数敏感信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。 基于x86的其他平台上的Linux kernel 2.6.37之前版本中的net/irda/af_irda.c文件中的irda_getsockopt函数中存在整数下溢漏洞。本地用户可以借助IRLMP_ENUMDEVICES getsockop调用从内核堆内存中获取敏感信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2010-4529
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2010-4529
请登录查看更多情报信息。
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37x_refsource_CONFIRM
- http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.htmlvendor-advisoryx_refsource_SUSE
- https://nvd.nist.gov/vuln/detail/CVE-2010-4529
Same Patch Batch · n/a · 2011-01-13 · 21 CVEs total
| CVE-2011-0263 | HP OpenView Network Node Manager 'ovas.exe'多个栈缓冲区溢出漏洞 | |
| CVE-2011-0310 | IBM WebSphere MQ缓冲区溢出漏洞 | |
| CVE-2011-0271 | HP OpenView Network Node Manager CGI脚本任意命令执行漏洞 | |
| CVE-2011-0270 | HP OpenView Network Node Manager 'nnmRptConfig.exe'格式化字符串漏洞 | |
| CVE-2011-0269 | HP OpenView Network Node Manager 'nnmRptConfig.exe'缓冲区溢出漏洞 | |
| CVE-2011-0268 | HP OpenView Network Node Manager 'nnmRptConfig.exe'任意代码执行漏洞 | |
| CVE-2011-0267 | HP OpenView Network Node Manager 'nnmRptConfig.exe'多个缓冲区溢出漏洞 | |
| CVE-2011-0266 | HP OpenView Network Node Manager 'nnmRptConfig.exe'任意代码执行漏洞 | |
| CVE-2011-0265 | HP OpenView Network Node Manager 'nnmRptConfig.exe'缓冲区溢出漏洞 | |
| CVE-2011-0264 | HP OpenView Network Node Manager ovutil.dll栈缓冲区溢出漏洞 | |
| CVE-2008-7271 | Eclipse IDE Help Contents web应用程序多个跨站脚本攻击漏洞 | |
| CVE-2011-0262 | HP OpenView Network Node Manager 'ovwebsnmpsrv.exe' ovutil.dll文件stringToSeconds函数缓冲区溢出漏洞 | |
| CVE-2011-0261 | HP OpenView Network Node Manager jovgraph 'jovgraph.exe'任意代码执行漏洞 | |
| CVE-2010-4647 | Eclipse IDE 跨站脚本漏洞 | |
| CVE-2010-4537 | CrawlTrack任意PHP代码执行漏洞 | |
| CVE-2010-4527 | Linux kernel OSS声音子系统load_mixer_volumes函数缓冲区错误漏洞 | |
| CVE-2010-4052 | GNU C Library regcomp实现栈消耗漏洞 | |
| CVE-2010-4051 | GNU C Library 安全漏洞 | |
| CVE-2010-3925 | Wb-I Contents-Mall未明敏感信息泄露漏洞 | |
| CVE-2010-3924 | Aimluck Aipo未明SQL注入漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2010-4529
No comments yet