CVE

Id
46061  
CVE No.
CVE-2010-3477  
Status
Candidate  
Description
The tcf_act_police_dump function in net/sched/act_police.c in the actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc4 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel memory via vectors involving a dump operation. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-2942.  
Phase
Assigned (20100921)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
501009 46061 CVE-2010-3477 BUGTRAQ:20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console  View
501010 46061 CVE-2010-3477 URL:http://www.securityfocus.com/archive/1/archive/1/520102/100/0/threaded  View
501011 46061 CVE-2010-3477 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git;a=commit;h=0f04cfd098fb81fded74e78ea1a1b86cc6c6c31e  View
501012 46061 CVE-2010-3477 CONFIRM:http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.36-rc4  View
501013 46061 CVE-2010-3477 CONFIRM:http://www.vmware.com/security/advisories/VMSA-2011-0012.html  View
501014 46061 CVE-2010-3477 DEBIAN:DSA-2126  View
501015 46061 CVE-2010-3477 URL:http://www.debian.org/security/2010/dsa-2126  View
501016 46061 CVE-2010-3477 REDHAT:RHSA-2010:0779  View
501017 46061 CVE-2010-3477 URL:http://www.redhat.com/support/errata/RHSA-2010-0779.html  View
501018 46061 CVE-2010-3477 REDHAT:RHSA-2010:0839  View
501019 46061 CVE-2010-3477 URL:http://www.redhat.com/support/errata/RHSA-2010-0839.html  View
501020 46061 CVE-2010-3477 REDHAT:RHSA-2011:0007  View
501021 46061 CVE-2010-3477 URL:http://www.redhat.com/support/errata/RHSA-2011-0007.html  View
501022 46061 CVE-2010-3477 UBUNTU:USN-1000-1  View
501023 46061 CVE-2010-3477 URL:http://www.ubuntu.com/usn/USN-1000-1  View
501024 46061 CVE-2010-3477 SECTRACK:1024603  View
501025 46061 CVE-2010-3477 URL:http://www.securitytracker.com/id?1024603  View
501026 46061 CVE-2010-3477 SECUNIA:42890  View
501027 46061 CVE-2010-3477 URL:http://secunia.com/advisories/42890  View
501028 46061 CVE-2010-3477 SECUNIA:46397  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
37354 JVNDB-2010-003139 ApPHP PHP MicroCMS における SQL インジェクションの脆弱性 ApPHP PHP MicroCMS の login.php には、SQL インジェクションの脆弱性が存在します。 CVE-2010-3481 46061 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003139.html  View