PT-2015-7042 · Linux+3 · Linux Kernel+3

Adam Mariš

·

Publicado

2015-08-07

·

Atualizado

2017-09-21

·

CVE-2015-5697

CVSS v2.0

2.1

Baixa

VetorAV:L/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.1.6
Description The issue allows local users to obtain sensitive information from kernel memory. This is due to the get bitmap file function in drivers/md/md.c not initializing a certain bitmap data structure, which can be exploited via a GET BITMAP FILE ioctl call.
Recommendations For Linux kernel versions prior to 4.1.6, update to version 4.1.6 or later to resolve the issue.

Exploit

Correção

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

ALT-PU-2015-1699
ALT-PU-2015-1849
CVE-2015-5697
DLA-310-1
DSA-3329-1
MGASA-2015-0386
MGASA-2015-0390
MGASA-2016-0015
SUSE-SU-2015:1727-1
SUSE-SU-2015:2167-1
USN-2731-1
USN-2732-1
USN-2748-1
USN-2749-1
USN-2751-1
USN-2752-1
USN-2777-1

Produtos afetados

Alt Linux
Linux Kernel
Suse
Ubuntu