Avaya Aura Voice Portal vulnerabilities

2 CVEs affecting Avaya Aura Voice Portal, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-2943, published 2010-09-30.

More from Avaya.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2010-2943, published 2010-09-30. High severity, CVSS 8.1. EPSS: 17% chance of exploitation in the next 30 days. The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read…
• CVE-2010-2492, published 2010-09-08. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Buffer overflow in the ecryptfs_uid_hash macro in fs/ecryptfs/messaging.c in the eCryptfs subsystem in the Linux kernel before 2.6.35 might allow local users to gain privileges or cause a denial of…