PT-2015-7655 · Linux+3 · Linux Kernel+3

Martin Prpič

·

Publicado

2015-10-23

·

Atualizado

2024-06-15

·

CVE-2015-7885

CVSS v3.1

2.3

Baixa

VetorAV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.3.3
Description The issue is related to the dgnc mgmt ioctl function in the Linux kernel, which does not properly initialize a certain structure member. This allows local users to obtain sensitive information from kernel memory by using a crafted application.
Recommendations For Linux kernel versions prior to 4.3.3, update to version 4.3.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the dgnc mgmt ioctl function until a patch is available.

Exploit

Correção

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

ALT-PU-2015-2110
ALT-PU-2016-1485
CVE-2015-7885
MGASA-2016-0005
MGASA-2016-0014
MGASA-2016-0015
OPENSUSE-SU-2016_0301-1
OPENSUSE-SU-2016_0318-1
OPENSUSE-SU-2024:10128-1
USN-2841-1
USN-2841-2
USN-2842-1
USN-2842-2
USN-2843-1
USN-2843-2
USN-2843-3
USN-2844-1

Produtos afetados

Alt Linux
Linux Kernel
Suse
Ubuntu