Avaya Voice Portal vulnerabilities

3 CVEs affecting Avaya Voice Portal, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-2942, published 2010-09-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2009-3939, published 2009-11-16. High severity, CVSS 7.1. EPSS: 0.4% chance of exploitation in the next 30 days. The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying…
CVE-2010-2942, published 2010-09-21. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. The actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc2 does not properly initialize certain structure members when performing dump operations, which…
CVE-2010-2798, published 2010-09-08. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. The gfs2_dirent_find_space function in fs/gfs2/dir.c in the Linux kernel before 2.6.35 uses an incorrect size value in calculations associated with sentinel directory entries, which allows local…