First published: Wed Oct 30 2019(Updated: )
drbd8 allows local users to bypass intended restrictions for certain actions via netlink packets, similar to CVE-2009-3725.
Credit: secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
debian/drbd8 | ||
debian/linux-2.6 | ||
debian/linux-modules-extra-2.6 | ||
Linbit Drbd8 | =2.6.26 | |
Debian Debian Linux | =5.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-0747 is a vulnerability in the drbd8 package that allows local users to bypass intended restrictions for certain actions via netlink packets.
The severity of CVE-2010-0747 is high with a CVSS score of 7.8.
The drbd8 package and certain versions of Linux kernel are affected by CVE-2010-0747.
To fix CVE-2010-0747, you should update the affected drbd8 package and Linux kernel to a secure version.
You can find more information about CVE-2010-0747 on the Debian Security Advisory DSA-2015, the Debian Security Tracker, and the Debian bug report.