PT-2005-1463 · Linux+1 · Linux Kernel+1
Matthew Miller
·
Published
2005-04-05
·
Updated
2018-10-03
·
CVE-2005-0400
CVSS v2.0
2.1
Low
| Vector | AV:L/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 2.6.11.6
Description
The issue concerns the improper initialization of memory by the ext2 make empty function call when creating a block for a new directory entry. This allows local users to potentially obtain sensitive information by reading the block.
Recommendations
For Linux kernel versions prior to 2.6.11.6, update to version 2.6.11.6 or later to resolve the issue.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel
Red Hat