CVE-2009-1192
3.6 Low
AI Score
Confidence
High
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:C/I:N/A:N
0.0004 Low
EPSS
Percentile
9.3%
The (1) agp_generic_alloc_page and (2) agp_generic_alloc_pages functions in drivers/char/agp/generic.c in the agp subsystem in the Linux kernel before 2.6.30-rc3 do not zero out pages that may later be available to a user-space process, which allows local users to obtain sensitive information by reading these pages.
References
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=59de2bebabc5027f93df999d59cc65df591c3e6e
lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html
lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html
lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html
openwall.com/lists/oss-security/2009/04/22/2
secunia.com/advisories/34981
secunia.com/advisories/35011
secunia.com/advisories/35120
secunia.com/advisories/35121
secunia.com/advisories/35343
secunia.com/advisories/35387
secunia.com/advisories/35656
secunia.com/advisories/37351
secunia.com/advisories/37471
wiki.rpath.com/Advisories:rPSA-2009-0084
www.debian.org/security/2009/dsa-1787
www.debian.org/security/2009/dsa-1794
www.debian.org/security/2009/dsa-1800
www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.30-rc3
www.mandriva.com/security/advisories?name=MDVSA-2009:119
www.mandriva.com/security/advisories?name=MDVSA-2009:135
www.redhat.com/support/errata/RHSA-2009-1081.html
www.securityfocus.com/archive/1/503610/100/0/threaded
www.securityfocus.com/archive/1/507985/100/0/threaded
www.securityfocus.com/bid/34673
www.ubuntu.com/usn/usn-793-1
www.vmware.com/security/advisories/VMSA-2009-0016.html
www.vupen.com/english/advisories/2009/3316
bugzilla.redhat.com/show_bug.cgi?id=497020
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10567
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8003
Social References
More
Related
3.6 Low
AI Score
Confidence
High
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:C/I:N/A:N
0.0004 Low
EPSS
Percentile
9.3%