PT-2010-5698 · Suse+2 · Cpint-Kmp-Default+4

Published

1970-01-01

·

Updated

2023-02-13

·

CVE-2010-3078

CVSS v2.0

7.2

High

VectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.36-rc4 cpint-kmp-default (affected versions not specified) drbd-kmp-default (affected versions not specified) cloop-kmp-default (affected versions not specified)
Description The issue allows local users to obtain potentially sensitive information from kernel stack memory via an ioctl call. Multiple vulnerabilities in the cpint-kmp-default, drbd-kmp-default, and cloop-kmp-default packages of SUSE Linux Enterprise and openSUSE operating systems can be exploited locally, leading to a breach of confidentiality, integrity, and availability of protected information.
Recommendations For Linux kernel versions prior to 2.6.36-rc4, update to version 2.6.36-rc4 or later. For cpint-kmp-default, drbd-kmp-default, and cloop-kmp-default packages, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200CWE-193CWE-189

Related Identifiers

BDU:2015-04609
BDU:2015-04610
BDU:2015-05302
CVE-2010-3078
DSA-2110-1
RHSA-2010:0839
RHSA-2010_0839
RHSA-2011:0007
RHSA-2011_0007

Affected Products

Linux Kernel
Red Hat
Cloop-Kmp-Default
Cpint-Kmp-Default
Drbd-Kmp-Default