Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c8f9-2rww-56v5

Опубликовано: 27 мар. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 2.3

Описание

A flaw was found in the Linux kernel's implementation of RDMA over infiniband. An attacker with a privileged local account can leak kernel stack information when issuing commands to the /dev/infiniband/rdma_cm device node. While this access is unlikely to leak sensitive user information, it can be further used to defeat existing kernel protection mechanisms.

A flaw was found in the Linux kernel's implementation of RDMA over infiniband. An attacker with a privileged local account can leak kernel stack information when issuing commands to the /dev/infiniband/rdma_cm device node. While this access is unlikely to leak sensitive user information, it can be further used to defeat existing kernel protection mechanisms.

EPSS

Процентиль: 2%
0.00014
Низкий

2.3 Low

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 2.3
ubuntu
почти 3 года назад

A flaw was found in the Linux kernel's implementation of RDMA over infiniband. An attacker with a privileged local account can leak kernel stack information when issuing commands to the /dev/infiniband/rdma_cm device node. While this access is unlikely to leak sensitive user information, it can be further used to defeat existing kernel protection mechanisms.

CVSS3: 3.3
redhat
около 4 лет назад

A flaw was found in the Linux kernel's implementation of RDMA over infiniband. An attacker with a privileged local account can leak kernel stack information when issuing commands to the /dev/infiniband/rdma_cm device node. While this access is unlikely to leak sensitive user information, it can be further used to defeat existing kernel protection mechanisms.

CVSS3: 2.3
nvd
почти 3 года назад

A flaw was found in the Linux kernel's implementation of RDMA over infiniband. An attacker with a privileged local account can leak kernel stack information when issuing commands to the /dev/infiniband/rdma_cm device node. While this access is unlikely to leak sensitive user information, it can be further used to defeat existing kernel protection mechanisms.

CVSS3: 2.3
msrc
почти 3 года назад

Описание отсутствует

CVSS3: 2.3
debian
почти 3 года назад

A flaw was found in the Linux kernel's implementation of RDMA over inf ...

EPSS

Процентиль: 2%
0.00014
Низкий

2.3 Low

CVSS3

Дефекты

CWE-200