2 matches found
Linux ALSA/dev/snd/timer driver Information Disclosure
The vulnerability of the ALSA/dev/snd/timer driver sound/core/timer.c in the Linux operating system is related to the disclosure of information during simultaneous data reading and analysis. Exploiting this vulnerability can allow an attacker, operating locally, to obtain confidential information...
5.5CVSS6.6AI score0.00721EPSS
SaveExploits0References45Affected Software2
DEBIAN-CVE-2017-1000380
sound/core/timer.c in the Linux kernel before 4.11.5 is vulnerable to a data race in the ALSA /dev/snd/timer driver resulting in local users being able to read information belonging to other users, i.e., uninitialized memory contents may be disclosed when a read and an ioctl happen at the same ti...
5.5CVSS7AI score0.00721EPSS
SaveExploits0References1
20