CVE-2010-2943: avaya aura_communication_manager

Modified

Published 30-09-2010Last modified 07-08-2024

Vulnerability summary

CVE-2010-2943 is a high (CVSS 8.1) vulnerability in avaya aura_communication_manager. EPSS estimates a 17.01% chance of exploitation in the next 30 days, higher than 97% of scored vulnerabilities. 2 public exploits are recorded.

Priority

Prioritiseweaponized exploit

Weaponized exploit (exploit-database, 29-09-2010)

Source freshness unavailable

How is this decided?

CVSS score

8.1/10

010

High · v3.1 (NVD)

EPSS score

17.01%

0%100%

Medium · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits2reference, exploit-database

Advisory lineage

Upstream 0 · Downstream 1

RHSA-2010:0723

Timeline

30-09-2010
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read or overwrite disk blocks that are currently assigned to an active file but were previously assigned to an unlinked file, by accessing a stale NFS filehandle.

CVSS metrics

2 scores · 1 source · 2 versions

v3.18.1v2.06.4

EPSS trend

Probability

17.01%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

No change 0.00 pp

From 17.01% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

2 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databaselocallinuxVerified
XFS - Deleted Inode Local Information Disclosure
Maturity: weaponized

Weaknesses

CWE · root cause

CWE-200Exposure of Sensitive Information to an Unauthorized ActorThe product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Affected systems

Version check

Known conditions: network-reachable, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Avaya7 products

aura_communication_manager5.2
aura_presence_services6.0 | 6.1 | 6.1.1
aura_session_manager1.1 | 5.2 | 6.0
aura_system_manager5.2 | 6.0 | 6.1 | 6.1.1
aura_system_platform_firmware1.1 | 6.0 | 6.0:sp1

Show all 7

Canonical1 product

ubuntu_linuxEOL6.06 | 9.10 | 10.04 | 10.10

Linux1 product

linux_kernel< 2.6.35

Vmware1 product

esx4.0 | 4.1

4 vendors · 10 products

References

25 links

article.gmane.org/gmane.comp.file-systems.xfs.general/33771Mailing ListX Refsource MLISTBroken Link
git.kernel.orgX Refsource CONFIRM
www.securityfocus.com/bid/42527VDB EntryX Refsource BIDExploitThird Party Advisory
git.kernel.orgX Refsource CONFIRM
www.redhat.com/support/errata/RHSA-2010-0723.htmlVendor AdvisoryX Refsource REDHATBroken Link
bugzilla.redhat.com/show_bug.cgi?id=624923X Refsource CONFIRMIssue TrackingPatchThird Party Advisory
www.securityfocus.com/archive/1/520102/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
article.gmane.org/gmane.comp.file-systems.xfs.general/33768Mailing ListX Refsource MLISTBroken Link
secunia.com/advisories/46397Third Party AdvisoryX Refsource SECUNIABroken Link
article.gmane.org/gmane.comp.file-systems.xfs.general/33769Mailing ListX Refsource MLISTBroken Link

Show all 25 references

www.openwall.com/lists/oss-security/2010/08/18/2Mailing ListX Refsource MLISTPatchThird Party Advisory
article.gmane.org/gmane.comp.file-systems.xfs.general/33767Mailing ListX Refsource MLISTBroken Link
oss.sgi.com/archives/xfs/2010-06/msg00191.htmlMailing ListX Refsource MLISTBroken Link
www.ubuntu.com/usn/USN-1041-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35X Refsource CONFIRMBroken Link
oss.sgi.com/archives/xfs/2010-06/msg00198.htmlMailing ListX Refsource MLISTBroken Link
www.vupen.com/english/advisories/2011/0280VDB EntryX Refsource VUPENBroken Link
www.vmware.com/security/advisories/VMSA-2011-0012.htmlX Refsource CONFIRMThird Party Advisory
secunia.com/advisories/42758Third Party AdvisoryX Refsource SECUNIABroken Link
support.avaya.com/css/P8/documents/100113326X Refsource CONFIRMThird Party Advisory
www.ubuntu.com/usn/USN-1057-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.openwall.com/lists/oss-security/2010/08/19/5Mailing ListX Refsource MLISTPatchThird Party Advisory
www.vupen.com/english/advisories/2011/0070VDB EntryX Refsource VUPENBroken Link
git.kernel.orgX Refsource CONFIRM
secunia.com/advisories/43161Third Party AdvisoryX Refsource SECUNIABroken Link