Lucene search
RootSSV:20315HistoryJan 06, 2011 - 12:00 a.m.
Linux Kernel "net/"子系统套接字过滤器本地信息泄露漏洞
2011-01-0600:00:00
Root
www.seebug.org
23
0.001 Low
EPSS
Percentile
41.9%
BUGTRAQ ID: 45064
CVE ID: CVE-2010-4161
Linux Kernel是开放源码操作系统Linux所使用的内核。
Linux Kernel在实现上存在信息泄露漏洞，本地攻击者可利用此漏洞获取敏感信息。
此问题源于从arg needlock = 0的tcp_v{4,6}_rcv()函数调用函数sk_filter()时，套接字当时未能锁定。
Linux kernel 2.6.0-2.6.18 rc7
厂商补丁：
Linux
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
Related
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:52:54
prion
prion
Sql injection
2010-12-30 19:00:00
cve
cve
CVE-2010-4161
2010-12-30 19:00:00
ubuntucve
ubuntucve
CVE-2010-4161
2010-12-30 00:00:00
nessus
nessus
Scientific Linux Security Update : kernel on SL5.x i386/x86_64
2012-08-01 00:00:00
RHEL 5 : kernel (RHSA-2011:0004)
2011-01-05 00:00:00
Oracle Linux 5 : kernel (ELSA-2011-0004)
2013-07-12 00:00:00
openvas
openvas
CentOS Update for kernel CESA-2011:0004 centos5 i386
2011-08-09 00:00:00
Oracle: Security Advisory (ELSA-2011-0004)
2015-10-06 00:00:00
CentOS Update for kernel CESA-2011:0004 centos5 x86_64
2012-07-30 00:00:00
centos
centos
kernel security update
2011-01-06 12:23:15
redhat
redhat
(RHSA-2011:0004) Important: kernel security, bug fix, and enhancement update
2011-01-04 00:00:00
oraclelinux
oraclelinux
kernel security, bug fix, and enhancement update
2011-01-04 00:00:00
vmware
vmware
VMware ESXi and ESX updates to third party libraries and ESX Service Console
2011-10-12 00:00:00
VMware ESX third party updates for Service Console packages glibc and dhcp
2011-10-12 00:00:00