CVE-2010-1636 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2010-1636

Deferred

More Info Official Page

Source-secalert@redhat.com

Published At-08 Jun, 2010 | 00:30

Updated At-11 Apr, 2025 | 00:51

The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the btrfs functionality in the Linux kernel 2.6.29 through 2.6.32, and possibly other versions, does not ensure that a cloned file descriptor has been opened for reading, which allows local users to read sensitive information from a write-only file descriptor.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	2.1	LOW	AV:L/AC:L/Au:N/C:P/I:N/A:N

Type: Primary

Version: 2.0

Base score: 2.1

Base severity: LOW

Vector:

AV:L/AC:L/Au:N/C:P/I:N/A:N

CPE Matches

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.29

cpe:2.3:o:linux:linux_kernel:2.6.29:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.29.1

cpe:2.3:o:linux:linux_kernel:2.6.29.1:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.29.2

cpe:2.3:o:linux:linux_kernel:2.6.29.2:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.29.3

cpe:2.3:o:linux:linux_kernel:2.6.29.3:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.29.4

cpe:2.3:o:linux:linux_kernel:2.6.29.4:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.29.5

cpe:2.3:o:linux:linux_kernel:2.6.29.5:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.29.6

cpe:2.3:o:linux:linux_kernel:2.6.29.6:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.30

cpe:2.3:o:linux:linux_kernel:2.6.30:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.30.1

cpe:2.3:o:linux:linux_kernel:2.6.30.1:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.30.2

cpe:2.3:o:linux:linux_kernel:2.6.30.2:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.30.3

cpe:2.3:o:linux:linux_kernel:2.6.30.3:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.30.4

cpe:2.3:o:linux:linux_kernel:2.6.30.4:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.30.5

cpe:2.3:o:linux:linux_kernel:2.6.30.5:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.30.6

cpe:2.3:o:linux:linux_kernel:2.6.30.6:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.30.7

cpe:2.3:o:linux:linux_kernel:2.6.30.7:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.30.8

cpe:2.3:o:linux:linux_kernel:2.6.30.8:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.30.9

cpe:2.3:o:linux:linux_kernel:2.6.30.9:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.30.10

cpe:2.3:o:linux:linux_kernel:2.6.30.10:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.31

cpe:2.3:o:linux:linux_kernel:2.6.31:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.31.1

cpe:2.3:o:linux:linux_kernel:2.6.31.1:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.31.2

cpe:2.3:o:linux:linux_kernel:2.6.31.2:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.31.3

cpe:2.3:o:linux:linux_kernel:2.6.31.3:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.31.4

cpe:2.3:o:linux:linux_kernel:2.6.31.4:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.31.5

cpe:2.3:o:linux:linux_kernel:2.6.31.5:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.31.6

cpe:2.3:o:linux:linux_kernel:2.6.31.6:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.31.7

cpe:2.3:o:linux:linux_kernel:2.6.31.7:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.31.8

cpe:2.3:o:linux:linux_kernel:2.6.31.8:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.31.9

cpe:2.3:o:linux:linux_kernel:2.6.31.9:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.31.10

cpe:2.3:o:linux:linux_kernel:2.6.31.10:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.31.11

cpe:2.3:o:linux:linux_kernel:2.6.31.11:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.31.12

cpe:2.3:o:linux:linux_kernel:2.6.31.12:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.31.13

cpe:2.3:o:linux:linux_kernel:2.6.31.13:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>2.6.32

cpe:2.3:o:linux:linux_kernel:2.6.32:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-200	Primary	nvd@nist.gov

CWE ID: CWE-200

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=5dc6416414fb3ec6e2825fd4d20c8bf1d7fe0395	secalert@redhat.com	N/A
http://www.openwall.com/lists/oss-security/2010/05/18/10	secalert@redhat.com	N/A
http://www.openwall.com/lists/oss-security/2010/05/18/2	secalert@redhat.com	Patch
http://www.openwall.com/lists/oss-security/2010/05/25/8	secalert@redhat.com	N/A
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/579585	secalert@redhat.com	Exploit Patch
https://bugzilla.redhat.com/show_bug.cgi?id=593226	secalert@redhat.com	Exploit
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=5dc6416414fb3ec6e2825fd4d20c8bf1d7fe0395	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.openwall.com/lists/oss-security/2010/05/18/10	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.openwall.com/lists/oss-security/2010/05/18/2	af854a3a-2127-422b-91ae-364da2661108	Patch
http://www.openwall.com/lists/oss-security/2010/05/25/8	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/579585	af854a3a-2127-422b-91ae-364da2661108	Exploit Patch
https://bugzilla.redhat.com/show_bug.cgi?id=593226	af854a3a-2127-422b-91ae-364da2661108	Exploit

Hyperlink: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=5dc6416414fb3ec6e2825fd4d20c8bf1d7fe0395

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://www.openwall.com/lists/oss-security/2010/05/18/10

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://www.openwall.com/lists/oss-security/2010/05/18/2

Source: secalert@redhat.com

Resource:

Patch

Hyperlink: http://www.openwall.com/lists/oss-security/2010/05/25/8

Source: secalert@redhat.com

Resource: N/A

Hyperlink: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/579585

Source: secalert@redhat.com

Resource:

Exploit

Patch

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=593226

Source: secalert@redhat.com

Resource:

Exploit

Hyperlink: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=5dc6416414fb3ec6e2825fd4d20c8bf1d7fe0395

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.openwall.com/lists/oss-security/2010/05/18/10

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.openwall.com/lists/oss-security/2010/05/18/2

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Hyperlink: http://www.openwall.com/lists/oss-security/2010/05/25/8

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/579585

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Exploit

Patch

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=593226

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Exploit