Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c8f9-2rww-56v5

Опубликовано: 27 мар. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 2.3

Описание

A flaw was found in the Linux kernel's implementation of RDMA over infiniband. An attacker with a privileged local account can leak kernel stack information when issuing commands to the /dev/infiniband/rdma_cm device node. While this access is unlikely to leak sensitive user information, it can be further used to defeat existing kernel protection mechanisms.

A flaw was found in the Linux kernel's implementation of RDMA over infiniband. An attacker with a privileged local account can leak kernel stack information when issuing commands to the /dev/infiniband/rdma_cm device node. While this access is unlikely to leak sensitive user information, it can be further used to defeat existing kernel protection mechanisms.

EPSS

Процентиль: 10%
0.00199
Низкий

2.3 Low

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 2.3
ubuntu
больше 3 лет назад

A flaw was found in the Linux kernel's implementation of RDMA over infiniband. An attacker with a privileged local account can leak kernel stack information when issuing commands to the /dev/infiniband/rdma_cm device node. While this access is unlikely to leak sensitive user information, it can be further used to defeat existing kernel protection mechanisms.

CVSS3: 3.3
redhat
больше 4 лет назад

A flaw was found in the Linux kernel's implementation of RDMA over infiniband. An attacker with a privileged local account can leak kernel stack information when issuing commands to the /dev/infiniband/rdma_cm device node. While this access is unlikely to leak sensitive user information, it can be further used to defeat existing kernel protection mechanisms.

CVSS3: 2.3
nvd
больше 3 лет назад

A flaw was found in the Linux kernel's implementation of RDMA over infiniband. An attacker with a privileged local account can leak kernel stack information when issuing commands to the /dev/infiniband/rdma_cm device node. While this access is unlikely to leak sensitive user information, it can be further used to defeat existing kernel protection mechanisms.

CVSS3: 2.3
msrc
больше 3 лет назад

Описание отсутствует

CVSS3: 2.3
debian
больше 3 лет назад

A flaw was found in the Linux kernel's implementation of RDMA over inf ...

EPSS

Процентиль: 10%
0.00199
Низкий

2.3 Low

CVSS3

Дефекты

CWE-200