CVE-2010-0003
5.9 Medium
AI Score
Confidence
Low
5.4 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:P/I:N/A:C
0.0004 Low
EPSS
Percentile
9.4%
The print_fatal_signal function in kernel/signal.c in the Linux kernel before 2.6.32.4 on the i386 platform, when print-fatal-signals is enabled, allows local users to discover the contents of arbitrary memory locations by jumping to an address and then reading a log file, and might allow local users to cause a denial of service (system slowdown or crash) by jumping to an address.
References
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b45c6e76bc2c72f6426c14bed64fdcbc9bf37cb0
lists.fedoraproject.org/pipermail/package-announce/2010-January/034250.html
lists.opensuse.org/opensuse-security-announce/2010-02/msg00002.html
lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html
lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html
patchwork.kernel.org/patch/69752/
secunia.com/advisories/38333
secunia.com/advisories/38492
secunia.com/advisories/38779
secunia.com/advisories/39033
secunia.com/advisories/43315
www.debian.org/security/2010/dsa-1996
www.debian.org/security/2010/dsa-2005
www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.4
www.openwall.com/lists/oss-security/2010/01/12/1
www.openwall.com/lists/oss-security/2010/01/13/4
www.redhat.com/support/errata/RHSA-2010-0147.html
www.redhat.com/support/errata/RHSA-2010-0161.html
www.securityfocus.com/archive/1/516397/100/0/threaded
www.securityfocus.com/bid/37724
www.vmware.com/security/advisories/VMSA-2011-0003.html
bugzilla.redhat.com/show_bug.cgi?id=554578
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10550
rhn.redhat.com/errata/RHSA-2010-0146.html
Social References
More
Related
5.9 Medium
AI Score
Confidence
Low
5.4 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:P/I:N/A:C
0.0004 Low
EPSS
Percentile
9.4%