PT-2010-5277 · Linux+1 · Linux Kernel+1

Dan Rosenberg

·

Published

2010-11-29

·

Updated

2020-08-07

·

CVE-2010-4077

CVSS v2.0

1.9

Low

VectorAV:L/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.36.1
Description The issue is related to the ntty ioctl tiocgicount function in the Linux kernel, which does not properly initialize a certain structure member. This allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call.
Recommendations For Linux kernel versions prior to 2.6.36.1, update to a version that contains a fix for this issue.

Exploit

Fix

Information Disclosure

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2010-4077
RHSA-2010:0958
RHSA-2011:0007
RHSA-2011_0007

Affected Products

Linux Kernel
Red Hat