CVE-2010-4258: fedoraproject fedora Improper Privilege Management

EPSS trend

Probability

2.66%

Chance of exploitation in the next 30 days

Percentile

85%

Versus all other CVEs

30-day change

0.00 pp

From 2.66% on 18-09-2026

18-09-202618-10-2026

EPSS score

2.66%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

exploit-databaselocallinuxVerified
Linux Kernel 2.6.37 (RedHat / Ubuntu 10.04) - 'Full-Nelson.c' Local Privilege Escalation
Maturity: weaponized

References

38 links

openwall.com/lists/oss-security/2010/12/02/2Mailing ListX Refsource MLISTThird Party Advisory
secunia.com/advisories/43056Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
secunia.com/advisories/42778Third Party AdvisoryX Refsource SECUNIA
openwall.com/lists/oss-security/2010/12/02/3Mailing ListX Refsource MLISTThird Party Advisory
git.kernel.orgX Refsource CONFIRM
secunia.com/advisories/42801Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
blog.nelhage.com/2010/12/cve-2010-4258-from-dos-to-privesc/X Refsource MISCThird Party Advisory
openwall.com/lists/oss-security/2010/12/09/4Mailing ListX Refsource MLISTThird Party Advisory

Show all 38 references

lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
secunia.com/advisories/42932Third Party AdvisoryX Refsource SECUNIA
archives.neohapsis.com/archives/fulldisclosure/2010-12/0086.htmlMailing ListX Refsource FULLDISCBroken Link
www.vupen.com/english/advisories/2011/0124VDB EntryX Refsource VUPENThird Party Advisory
marc.info?l=linux-kernel&m=129117048916957&w=2Mailing ListX Refsource MLISTPatchThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.vupen.com/english/advisories/2010/3321VDB EntryX Refsource VUPENThird Party Advisory
openwall.com/lists/oss-security/2010/12/08/9Mailing ListX Refsource MLISTThird Party Advisory
www.vupen.com/english/advisories/2011/0298VDB EntryX Refsource VUPENThird Party Advisory
www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36.2X Refsource CONFIRMBroken Link
openwall.com/lists/oss-security/2010/12/09/14Mailing ListX Refsource MLISTThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2011-01/msg00007.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
code.google.com/p/chromium-os/issues/detail?id=10234X Refsource CONFIRMThird Party Advisory
www.vupen.com/english/advisories/2011/0375VDB EntryX Refsource VUPENThird Party Advisory
lkml.org/lkml/2010/12/1/543Mailing ListX Refsource MLISTPatchThird Party Advisory
googlechromereleases.blogspot.com/2011/01/chrome-os-beta-channel-update.htmlX Refsource CONFIRMThird Party Advisory
www.vupen.com/english/advisories/2011/0012VDB EntryX Refsource VUPENThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
openwall.com/lists/oss-security/2010/12/02/4Mailing ListX Refsource MLISTThird Party Advisory
www.mandriva.com/security/advisories?name=MDVSA-2011:029Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
secunia.com/advisories/42745Third Party AdvisoryX Refsource SECUNIA
openwall.com/lists/oss-security/2010/12/02/7Mailing ListX Refsource MLISTThird Party Advisory
openwall.com/lists/oss-security/2010/12/08/5Mailing ListX Refsource MLISTThird Party Advisory
secunia.com/advisories/43291Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2011/0213VDB EntryX Refsource VUPENThird Party Advisory
bugzilla.redhat.com/show_bug.cgi?id=659567X Refsource CONFIRMIssue TrackingThird Party Advisory
openwall.com/lists/oss-security/2010/12/08/4Mailing ListX Refsource MLISTThird Party Advisory

Related vulnerabilities

CVE-2018-1111fedoradhcp+1497.86%8y ago17-05-2018 16:00DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol.CVE-2018-7262fedoraprojectfedora+282.87%8y ago19-03-2018 21:00In Ceph before 12.2.3 and 13.x through 13.0.1, the rgw_civetweb.cc RGWCivetWeb::init_env function in radosgw doesn't handle malformed HTTP headers properly, allowing for denial of service.CVE-2018-5390a10networksadvanced_core_operating_system+10071.11%8y ago06-08-2018 20:00Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.CVE-2018-5730debiankrb5+72.24%8y ago06-03-2018 20:00MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check by supplying both a "linkdn" and "containerdn" database argument, or by supplying a DN string which is a left extension of a container DN string but is not hierarchically within the container DN.CVE-2018-5729debiankrb5+72.58%8y ago06-03-2018 20:00MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL pointer dereference) or bypass a DN container check by supplying tagged data that is internal to the database module.CVE-2018-10196canonicalubuntu_linux+241.66%8y ago30-05-2018 21:00NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote attackers to cause a denial of service (application crash) via a crafted file.

All vulnerabilities infedora linux_kernel opensuse linux_enterprise_desktop linux_enterprise_real_time_extension

CVE-2010-4258: fedoraproject fedora Improper Privilege Management

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References