Veracode Vulnerability DatabaseVERACODE:24652Information Disclosure
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
kernel is vulnerable to information disclosure. An information leak in bcm_connect() in the Controller Area Network (CAN) Broadcast Manager implementation could allow a local, unprivileged user to leak kernel mode addresses in /proc/net/can-bcm.
References
docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Technical_Notes/ape.html#RHSA-2011-0498
openwall.com/lists/oss-security/2010/11/03/3
openwall.com/lists/oss-security/2010/11/04/4
openwall.com/lists/oss-security/2010/12/20/2
openwall.com/lists/oss-security/2010/12/21/1
www.mandriva.com/security/advisories?name=MDVSA-2011:029
www.securityfocus.com/bid/44661
www.spinics.net/lists/netdev/msg145791.html
www.spinics.net/lists/netdev/msg145796.html
www.spinics.net/lists/netdev/msg146270.html
www.spinics.net/lists/netdev/msg146468.html
access.redhat.com/errata/RHSA-2011:0498
access.redhat.com/security/updates/classification/#important
bugzilla.redhat.com/show_bug.cgi?id=664544
Related
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N