Lucene search

K
nvd[email protected]NVD:CVE-2010-2803
HistorySep 08, 2010 - 8:00 p.m.

CVE-2010-2803

2010-09-0820:00:02
CWE-200
web.nvd.nist.gov
5

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

5.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%

The drm_ioctl function in drivers/gpu/drm/drm_drv.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6, and 2.6.35.x before 2.6.35.4 allows local users to obtain potentially sensitive information from kernel memory by requesting a large memory-allocation amount.

Affected configurations

NVD
Node
linuxlinux_kernelRange<2.6.27.53
OR
linuxlinux_kernelRange2.6.32–2.6.32.21
OR
linuxlinux_kernelRange2.6.34–2.6.34.6
OR
linuxlinux_kernelRange2.6.35–2.6.35.4
Node
debiandebian_linuxMatch5.0
Node
opensuseopensuseMatch11.1
OR
opensuseopensuseMatch11.3
OR
suselinux_enterprise_desktopMatch11sp1
OR
suselinux_enterprise_high_availability_extensionMatch11sp1
OR
suselinux_enterprise_real_timeMatch11sp1
OR
suselinux_enterprise_serverMatch11sp1

References

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

5.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%