CVE-2010-4210

The pfs_getextattr function in FreeBSD 7.x before 7.3-RELEASE and 8.x before 8.0-RC1 unlocks a mutex that was not previously locked, which allows local users to cause a denial of service (kernel panic), overwrite arbitrary memory locations, and possibly execute arbitrary code via vectors related to opening a file on a file system that uses pseudofs.

CVSS v3.1

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

1.13% chance of exploitation in the next 30 days, 64th percentile

Published

2010-11-20

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/15206

References

• CVE Record
• NVD entry

Related

• CVE-2010-4186
• CVE-2010-4221
• CVE-2010-4185
• CVE-2010-4227
• CVE-2010-4181
• CVE-2010-4228