What is the severity of CVE-2010-2020?

CVE-2010-2020 is considered a medium severity vulnerability that can lead to privilege escalation for local users.

How do I fix CVE-2010-2020?

To fix CVE-2010-2020, it is recommended to disable the vfs.usermount setting or upgrade to a patched version of FreeBSD.

Which versions of FreeBSD are affected by CVE-2010-2020?

CVE-2010-2020 affects FreeBSD versions 7.2 through 8.1-PRERELEASE.

What type of attacks can exploit CVE-2010-2020?

CVE-2010-2020 can be exploited via crafted mount requests that manipulate the fhsize parameter.

Who can be affected by CVE-2010-2020?

Local users on affected FreeBSD systems can be impacted by CVE-2010-2020, allowing them to gain elevated privileges.

Vulnerability/
CVE-2010-2020

medium

6.9

CWE

28/5/2010

7/8/2024

CVE-2010-2020: Input Validation

First published: Fri May 28 2010(Updated: )

sys/nfsclient/nfs_vfsops.c in the NFS client in the kernel in FreeBSD 7.2 through 8.1-PRERELEASE, when vfs.usermount is enabled, does not validate the length of a certain fhsize parameter, which allows local users to gain privileges via a crafted mount request.

Credit: secteam@freebsd.org

Affected Software	Affected Version	How to fix
FreeBSD Kernel	=8.0
FreeBSD Kernel	=8.1-prerelease
FreeBSD Kernel	=7.2-pre-release
FreeBSD Kernel	=7.2
FreeBSD Kernel	=7.2-stable

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2010-2020?
CVE-2010-2020 is considered a medium severity vulnerability that can lead to privilege escalation for local users.
How do I fix CVE-2010-2020?
To fix CVE-2010-2020, it is recommended to disable the vfs.usermount setting or upgrade to a patched version of FreeBSD.
Which versions of FreeBSD are affected by CVE-2010-2020?
CVE-2010-2020 affects FreeBSD versions 7.2 through 8.1-PRERELEASE.
What type of attacks can exploit CVE-2010-2020?
CVE-2010-2020 can be exploited via crafted mount requests that manipulate the fhsize parameter.
Who can be affected by CVE-2010-2020?
Local users on affected FreeBSD systems can be impacted by CVE-2010-2020, allowing them to gain elevated privileges.

agent/type
agent/references
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/weakness
agent/last-modified-date
agent/severity
agent/author
agent/description
agent/first-publish-date
agent/event
agent/source
agent/tags
collector/nvd-historical
agent/software-canonical-lookup-request
collector/nvd-index
vendor/freebsd
canonical/freebsd kernel
version/freebsd kernel/8.0
version/freebsd kernel/8.1-prerelease
version/freebsd kernel/7.2-pre-release
version/freebsd kernel/7.2
version/freebsd kernel/7.2-stable

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.