Lucene search

K
cvelistRedhatCVELIST:CVE-2011-2495
HistoryJun 13, 2012 - 10:00 a.m.

CVE-2011-2495

2012-06-1310:00:00
redhat
www.cve.org
7

AI Score

6.6

Confidence

High

EPSS

0

Percentile

5.1%

fs/proc/base.c in the Linux kernel before 2.6.39.4 does not properly restrict access to /proc/#####/io files, which allows local users to obtain sensitive I/O statistics by polling a file, as demonstrated by discovering the length of another user’s password.