Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:3367
HistoryFeb 01, 2017 - 1:50 a.m.

Exposure Of Kernel Memory Layout Information

2017-02-0101:50:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

NetworkExtension is vulnerable to exposure of the kernel memory layout. The vulnerability is possible because it does not handle the uninitialized memory issue. Therefore, when the memory is not initialized properly, attackers can get sensitive kernel memory layout information.

CPENameOperatorVersion
networkextensioneq1.0.0

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

Related for VERACODE:3367