PT-2010-5699 · Suse+1 · Cpint-Kmp-Default+3

Published 1970-01-01 · Updated 2024-06-15 · CVE-2010-3297

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.36-rc5 cpint-kmp-default (affected versions not specified) drbd-kmp-default (affected versions not specified) cloop-kmp-default (affected versions not specified)

Description The issue allows local users to obtain potentially sensitive information from kernel stack memory. Multiple vulnerabilities in the cpint-kmp-default, drbd-kmp-default, and cloop-kmp-default packages of SUSE Linux Enterprise and openSUSE operating systems can lead to disruption of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited locally.

Recommendations For Linux kernel versions prior to 2.6.36-rc5, update to version 2.6.36-rc5 or later to resolve the issue. For cpint-kmp-default, drbd-kmp-default, and cloop-kmp-default packages, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-193

CWE-909

CWE-189

Related Identifiers

BDU:2015-04609

BDU:2015-04610

BDU:2015-05302

CVE-2010-3297

DSA-2126-1

OPENSUSE-SU-2024:10128-1

RHSA-2010:0771

Affected Products

Linux Kernel

Cloop-Kmp-Default

Cpint-Kmp-Default

Drbd-Kmp-Default

References · 110

• http://openwall.com/lists/oss-security/2010/09/14/2 · Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=633145 · Patch
• http://redhat.com/support/errata/RHSA-2010-0771.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04609 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10128-1 · Vendor Advisory
• http://ubuntu.com/usn/USN-1041-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html · Vendor Advisory
• http://ubuntu.com/usn/USN-1057-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-05302 · Security Note
• http://openwall.com/lists/oss-security/2010/09/14/7 · Patch
• http://mandriva.com/security/advisories?name=MDVSA-2011:051 · Vendor Advisory
• http://debian.org/security/2010/dsa-2126 · Vendor Advisory
• http://lkml.org/lkml/2010/9/11/168 · Patch