Описание
Race condition in the environ_read function in fs/proc/base.c in the Linux kernel before 4.5.4 allows local users to obtain sensitive information from kernel memory by reading a /proc/*/environ file during a process-setup time interval in which environment-variable copying is incomplete.
Ссылки
- Issue TrackingPatchThird Party Advisory
- Third Party Advisory
- Release NotesVendor Advisory
- Third Party AdvisoryVDB Entry
- Issue Tracking
- Issue Tracking
- Issue TrackingPatchThird Party Advisory
- Issue TrackingPatchThird Party Advisory
- Third Party Advisory
- Release NotesVendor Advisory
- Third Party AdvisoryVDB Entry
- Issue Tracking
- Issue Tracking
- Issue TrackingPatchThird Party Advisory
Уязвимые конфигурации
EPSS
5.5 Medium
CVSS3
4.7 Medium
CVSS2
Дефекты
Связанные уязвимости
Race condition in the environ_read function in fs/proc/base.c in the Linux kernel before 4.5.4 allows local users to obtain sensitive information from kernel memory by reading a /proc/*/environ file during a process-setup time interval in which environment-variable copying is incomplete.
Race condition in the environ_read function in fs/proc/base.c in the Linux kernel before 4.5.4 allows local users to obtain sensitive information from kernel memory by reading a /proc/*/environ file during a process-setup time interval in which environment-variable copying is incomplete.
Race condition in the environ_read function in fs/proc/base.c in the L ...
Race condition in the environ_read function in fs/proc/base.c in the Linux kernel before 4.5.4 allows local users to obtain sensitive information from kernel memory by reading a /proc/*/environ file during a process-setup time interval in which environment-variable copying is incomplete.
ALT-PU-2016-1490: package `kernel-image-un-def` update to version 4.5.4-alt1
EPSS
5.5 Medium
CVSS3
4.7 Medium
CVSS2