PT-2010-4718 · Linux+1 · Linux Kernel+1

Dan Rosenberg · Publicado 2010-09-30 · Atualizado 2024-06-15 · CVE-2010-3298

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.36-rc5

Description The issue is related to the hso get count function in the Linux kernel, which does not properly initialize a certain structure member. This allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call.

Recommendations For Linux kernel versions prior to 2.6.36-rc5, update to version 2.6.36-rc5 or later to resolve the issue. As a temporary workaround, consider restricting access to the TIOCGICOUNT ioctl call to minimize the risk of exploitation.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2010-3298

OPENSUSE-SU-2024:10128-1

RHSA-2011:0007

RHSA-2011_0007

Produtos afetados

Linux Kernel

Red Hat

Referências · 173

• http://securityfocus.com/bid/43226 · Nota
• http://lkml.org/lkml/2010/9/11/167 · Correção
• https://suse.com/security/cve/CVE-2010-2066 · Nota
• https://suse.com/security/cve/CVE-2016-7039 · Nota
• https://access.redhat.com/security/cve/CVE-2010-3078 · Nota
• http://openwall.com/lists/oss-security/2010/09/14/2 · Correção
• https://suse.com/security/cve/CVE-2016-4470 · Nota
• https://access.redhat.com/security/cve/CVE-2010-3477 · Nota
• https://bdu.fstec.ru/vul/2015-04590 · Nota de Segurança
• http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=7011e660938fc44ed86319c18a5954e95a82ab3e · Nota
• https://suse.com/security/cve/CVE-2010-3297 · Nota
• https://suse.com/security/cve/CVE-2010-3296 · Nota
• https://suse.com/security/cve/CVE-2013-0231 · Nota
• http://secunia.com/advisories/42758 · Nota
• https://access.redhat.com/security/cve/CVE-2010-3861 · Nota