Lucene search

MitreCVE-2010-4077

HistoryNov 29, 2010 - 4:00 p.m.

CVE-2010-4077

2010-11-2916:00:03

CWE-200

mitre

web.nvd.nist.gov

cve-2010-4077

nvd

linux kernel

information security

kernel stack memory

ioctl call

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

AI Score

6.7

Confidence

High

EPSS

Percentile

15.5%

JSON

The ntty_ioctl_tiocgicount function in drivers/char/nozomi.c in the Linux kernel 2.6.36.1 and earlier does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call.

Affected configurations

Nvd

Node

linuxlinux_kernelRange≤2.6.36.1

VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::

References

git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d281da7ff6f70efca0553c288bb883e8605b3862

lkml.indiana.edu/hypermail//linux/kernel/1009.1/03387.html

secunia.com/advisories/42890

securityreason.com/securityalert/8129

www.openwall.com/lists/oss-security/2010/09/25/2

www.openwall.com/lists/oss-security/2010/10/06/6

www.openwall.com/lists/oss-security/2010/10/07/1

www.openwall.com/lists/oss-security/2010/10/25/3

www.redhat.com/support/errata/RHSA-2010-0958.html

www.redhat.com/support/errata/RHSA-2011-0007.html

www.securityfocus.com/bid/45059

bugzilla.redhat.com/show_bug.cgi?id=648663

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

AI Score

6.7

Confidence

High

EPSS

Percentile

15.5%

JSON

Related for CVE-2010-4077