85 matches found
CVE-2010-1488: Undefined Security Weakness
The procoomscore function in fs/proc/base.c in the Linux kernel before 2.6.34-rc4 uses inappropriate data structures during selection of a candidate for the OOM killer, which might allow local users to cause a denial of service via unspecified patterns of task creation...
CVE-2009-2691
The mmformaps function in fs/proc/base.c in the Linux kernel 2.6.30.4 and earlier allows local users to read 1 maps and 2 smaps files under proc/ via vectors related to ELF loading, a setuid process, and a race condition...
CVE-2009-2691: Exposure of Sensitive Information to an Unauthorized Actor
The mmformaps function in fs/proc/base.c in the Linux kernel 2.6.30.4 and earlier allows local users to read 1 maps and 2 smaps files under proc/ via vectors related to ELF loading, a setuid process, and a race condition...
Linux Kernel 'fs/proc/base.c'本地信息泄漏漏洞
Bugraq ID: 36019 CVE ID:CVE-2009-2691 Linux是一款开放源代码的操作系统。 fs/proc/base.c文件包含的"mmformaps"函数存在错误,攻击者可以利用这个漏洞在setuid进程启动时从"/proc"文件系统中获得"maps"和"smaps"文件的内容信息。造成敏感信息泄漏。 Linux kernel 2.6.31 -rc3 + Trustix Secure Enterprise Linux 2.0 + Trustix Secure Linux 2.2 + Trustix Secure Linux 2.1 + Trustix Secur...
CVE-2003-0462: Undefined Security Weakness
A race condition in the way envstart and envend pointers are initialized in the execve system call and used in fs/proc/base.c on Linux 2.4 allows local users to cause a denial of service crash...