PT-2011-1446 · Linux+1 · Linux Kernel+1

CVE-2010-3877 · Publicado 2011-01-03 · Atualizado 2023-02-13

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Baixa

Vetor base

AV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.37-rc2

Description The issue concerns the get name function in net/tipc/socket.c, which fails to initialize a certain structure. This allows local users to obtain potentially sensitive information from kernel stack memory by reading a copy of this structure.

Recommendations For versions prior to 2.6.37-rc2, update to version 2.6.37-rc2 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-909

Identificadores relacionados

CVE-2010-3877

DSA-2126-1

RHSA-2011:0017

RHSA-2011_0017

Produtos afetados

Linux Kernel

Red Hat

Referências · 62

• https://access.redhat.com/errata/RHSA-2011:0017 · Nota
• http://secunia.com/advisories/42884 · Nota
• https://access.redhat.com/security/cve/CVE-2010-4263 · Nota
• https://bdu.fstec.ru/vul/2016-01580 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2010-4075 · Nota
• http://exploit-db.com/exploits/15619 · Nota
• https://access.redhat.com/security/cve/CVE-2010-3296 · Nota
• http://securityfocus.com/bid/44630 · Nota
• https://bdu.fstec.ru/vul/2015-04590 · Nota de Segurança
• http://marc.info/?l=linux-netdev&m=128854507420917&w=2 · Correção
• https://access.redhat.com/security/cve/CVE-2010-4080 · Nota
• http://securityfocus.com/archive/1/520102/100/0/threaded · Nota
• https://bdu.fstec.ru/vul/2015-08634 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2010-4081 · Nota
• https://bdu.fstec.ru/vul/2015-08631 · Nota de Segurança