Lucene search
RootSSV:20330HistoryJan 19, 2011 - 12:00 a.m.
Linux Kernel "kvm_vcpu_events.interrupt.pad"字段本地信息泄露漏洞
2011-01-1900:00:00
Root
www.seebug.org
18
0.0004 Low
EPSS
Percentile
5.7%
BUGTRAQ ID: 45676
CVE ID: CVE-2010-4525
Linux Kernel是开放源码操作系统Linux所使用的内核。
Linux Kernel在实现上存在漏洞，本地攻击者可利用此漏洞获取敏感信息。
某些版本的内核没有初始化kvm_vcpu_events.interrupt.pad字段就将其拷贝到了用户态，导致内核信息泄露。
Linux kernel 2.6.33-rc4 - 2.6.34
厂商补丁：
Linux
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
Related
nessus
nessus
Oracle Linux 5 : kvm (ELSA-2011-0028)
2023-09-07 00:00:00
RHEL 5 : kvm (RHSA-2011:0028)
2013-01-24 00:00:00
Scientific Linux Security Update : kvm on SL5.x x86_64
2012-08-01 00:00:00
cve
cve
CVE-2010-4525
2011-01-11 03:00:00
veracode
veracode
Information Disclosure
2020-04-10 00:53:10
openvas
openvas
Oracle Linux Local Check: ELSA-2011-0028
2015-10-06 00:00:00
RedHat Update for kernel RHSA-2011:0007-01
2012-06-05 00:00:00
RedHat Update for kernel RHSA-2011:0007-01
2012-06-05 00:00:00
prion
prion
Design/Logic Flaw
2011-01-11 03:00:00
redhat
redhat
(RHSA-2011:0028) Low: kvm security and bug fix update
2011-01-13 00:00:00
(RHSA-2011:0007) Important: kernel security and bug fix update
2011-01-11 00:00:00
ubuntucve
ubuntucve
CVE-2010-4525
2011-01-11 00:00:00
oraclelinux
oraclelinux
kvm security and bug fix update
2011-01-20 00:00:00
kernel security and bug fix update
2011-02-12 00:00:00
suse
suse
remote denial of service in kernel
2011-04-28 13:57:06