Avaya Aura System Platform vulnerabilities

5 CVEs affecting Avaya Aura System Platform, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-2943, published 2010-09-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2010-2943, published 2010-09-30. High severity, CVSS 8.1. EPSS: 17% chance of exploitation in the next 30 days. The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read…
CVE-2009-3939, published 2009-11-16. High severity, CVSS 7.1. EPSS: 0.4% chance of exploitation in the next 30 days. The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying…
CVE-2010-2492, published 2010-09-08. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Buffer overflow in the ecryptfs_uid_hash macro in fs/ecryptfs/messaging.c in the eCryptfs subsystem in the Linux kernel before 2.6.35 might allow local users to gain privileges or cause a denial of…
CVE-2010-2942, published 2010-09-21. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. The actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc2 does not properly initialize certain structure members when performing dump operations, which…
CVE-2010-2798, published 2010-09-08. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. The gfs2_dirent_find_space function in fs/gfs2/dir.c in the Linux kernel before 2.6.35 uses an incorrect size value in calculations associated with sentinel directory entries, which allows local…