PT-2010-5699 · Suse+1 · Cpint-Kmp-Default+3

Publicado

1970-01-01

·

Atualizado

2024-06-15

·

CVE-2010-3297

CVSS v2.0

7.2

Alta

VetorAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.36-rc5 cpint-kmp-default (affected versions not specified) drbd-kmp-default (affected versions not specified) cloop-kmp-default (affected versions not specified)
Description The issue allows local users to obtain potentially sensitive information from kernel stack memory. Multiple vulnerabilities in the cpint-kmp-default, drbd-kmp-default, and cloop-kmp-default packages of SUSE Linux Enterprise and openSUSE operating systems can lead to disruption of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited locally.
Recommendations For Linux kernel versions prior to 2.6.36-rc5, update to version 2.6.36-rc5 or later to resolve the issue. For cpint-kmp-default, drbd-kmp-default, and cloop-kmp-default packages, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-193CWE-909CWE-189

Identificadores relacionados

BDU:2015-04609
BDU:2015-04610
BDU:2015-05302
CVE-2010-3297
DSA-2126-1
OPENSUSE-SU-2024:10128-1
RHSA-2010:0771

Produtos afetados

Linux Kernel
Cloop-Kmp-Default
Cpint-Kmp-Default
Drbd-Kmp-Default