CVE-2010-4074

Опубликовано: 29 нояб. 2010

Источник: nvd

CVSS2: 1.9

EPSS Низкий

Описание

The USB subsystem in the Linux kernel before 2.6.36-rc5 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to TIOCGICOUNT ioctl calls, and the (1) mos7720_ioctl function in drivers/usb/serial/mos7720.c and (2) mos7840_ioctl function in drivers/usb/serial/mos7840.c.

Ссылки

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a0846f1868b11cd827bdfeaf4527d8b1b1c0b098
http://lkml.org/lkml/2010/9/15/392
Mailing List
Patch
Third Party Advisory
http://secunia.com/advisories/42890
Third Party Advisory
http://www.debian.org/security/2010/dsa-2126
Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.36/ChangeLog-2.6.36-rc5
Broken Link
http://www.openwall.com/lists/oss-security/2010/09/25/2
Mailing List
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2010/10/06/6
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2010/10/07/1
Mailing List
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2010/10/25/3
Mailing List
Patch
Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2010-0958.html
Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2011-0007.html
Third Party Advisory
http://www.securityfocus.com/bid/45074
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=648659
Issue Tracking
Patch
Third Party Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a0846f1868b11cd827bdfeaf4527d8b1b1c0b098
http://lkml.org/lkml/2010/9/15/392
Mailing List
Patch
Third Party Advisory
http://secunia.com/advisories/42890
Third Party Advisory
http://www.debian.org/security/2010/dsa-2126
Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.36/ChangeLog-2.6.36-rc5
Broken Link
http://www.openwall.com/lists/oss-security/2010/09/25/2
Mailing List
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2010/10/06/6
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 2.6.36 (исключая)

cpe:2.3:o:linux:linux_kernel:2.6.36:-:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:2.6.36:rc1:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:2.6.36:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:2.6.36:rc3:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:2.6.36:rc4:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*

EPSS

Процентиль: 24%

0.00075

Низкий

1.9 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2010-4074

ubuntu

больше 14 лет назад

CVE-2010-4074

redhat

почти 15 лет назад

CVE-2010-4074

debian

больше 14 лет назад

The USB subsystem in the Linux kernel before 2.6.36-rc5 does not prope ...

GHSA-fjxv-x673-382q

github

около 3 лет назад

ELSA-2011-0007

oracle-oval

больше 14 лет назад

ELSA-2011-0007: kernel security and bug fix update (IMPORTANT)

EPSS

Процентиль: 24%

0.00075

Низкий

1.9 Low

CVSS2

Дефекты

CWE-200