PT-2009-5544 · Linux+1 · Linux Kernel+1

Eugene Teo

·

Publicado

2009-10-19

·

Atualizado

2020-08-13

·

CVE-2009-3228

CVSS v2.0

2.1

Baixa

VetorAV:L/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.4.x before 2.4.37.6 Linux kernel versions 2.6.x before 2.6.31-rc9
Description The issue is related to the tc fill tclass function in the tc subsystem, which does not initialize certain structure members, specifically tcm pad1 and tcm pad2. This might allow local users to obtain sensitive information from kernel memory.
Recommendations For Linux kernel versions 2.4.x before 2.4.37.6, update to version 2.4.37.6 or later. For Linux kernel versions 2.6.x before 2.6.31-rc9, update to version 2.6.31-rc9 or later.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-909

Identificadores relacionados

CVE-2009-3228
DSA-1927-1
DSA-1928-1
DSA-1929-1
RHSA-2009:1522
RHSA-2009:1540
RHSA-2009:1548
RHSA-2009_1522
RHSA-2009_1548

Produtos afetados

Linux Kernel
Red Hat