Back to search
CVE-2010-3877
Published: Jan 3, 2011
Modified: Aug 7, 2024
PUBLISHED
Description
The get_name function in net/tipc/socket.c in the Linux kernel before 2.6.37-rc2 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory by reading a copy of this structure.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
kernel-getname-info-disc(64578)
vdb-entry
x_refsource_XF
20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console
mailing-list
x_refsource_BUGTRAQ
RHSA-2011:0017
vendor-advisory
x_refsource_REDHAT
46397
third-party-advisory
x_refsource_SECUNIA
http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.37-rc2
x_refsource_CONFIRM
[oss-security] 20101104 Re: CVE request: kernel stack infoleaks
mailing-list
x_refsource_MLIST
[netdev] 20101031 [PATCH 3/3] net: tipc: fix information leak to userland
mailing-list
x_refsource_MLIST
[oss-security] 20101102 CVE request: kernel stack infoleaks
mailing-list
x_refsource_MLIST
http://www.vmware.com/security/advisories/VMSA-2011-0012.html
x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=649717
x_refsource_CONFIRM
42884
third-party-advisory
x_refsource_SECUNIA
MDVSA-2011:029
vendor-advisory
x_refsource_MANDRIVA
44630
vdb-entry
x_refsource_BID
DSA-2126
vendor-advisory
x_refsource_DEBIAN
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now