PT-2011-1588 · Linux+1 · Linux Kernel+1

Publicado 2011-01-11 · Atualizado 2017-08-17 · CVE-2010-4525

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Baixa

Vetor base

AV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.6.33 through 2.6.34.y

Description The issue allows local users to obtain potentially sensitive information from kernel stack memory. This is due to the Linux kernel not initializing a specific structure member.

Recommendations For Linux kernel versions 2.6.33 through 2.6.34.y, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2010-4525

RHSA-2011:0007

RHSA-2011:0028

RHSA-2011_0007

RHSA-2011_0028

Produtos afetados

Linux Kernel

Red Hat

Referências · 86

• http://marc.info/?l=linux-netdev&m=129059035929046&w=2 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=660188 · Nota
• https://access.redhat.com/security/cve/CVE-2010-3067 · Nota
• http://securityfocus.com/archive/1/514705 · Nota
• https://access.redhat.com/security/cve/CVE-2010-4075 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4525 · Nota
• http://exploit-db.com/exploits/15622 · Nota
• http://openwall.com/lists/oss-security/2010/11/24/2 · Nota
• https://access.redhat.com/security/cve/CVE-2010-3876 · Nota
• https://bdu.fstec.ru/vul/2015-06262 · Nota de Segurança
• http://openwall.com/lists/oss-security/2010/11/24/10 · Nota
• https://access.redhat.com/security/cve/CVE-2010-4082 · Nota
• https://bdu.fstec.ru/vul/2015-05302 · Nota de Segurança
• https://access.redhat.com/errata/RHSA-2011:0007 · Nota
• https://access.redhat.com/security/cve/CVE-2010-4072 · Nota