CVE

Id
48638  
CVE No.
CVE-2011-0726  
Status
Candidate  
Description
The do_task_stat function in fs/proc/array.c in the Linux kernel before 2.6.39-rc1 does not perform an expected uid check, which makes it easier for local users to defeat the ASLR protection mechanism by reading the start_code and end_code fields in the /proc/#####/stat file for a process executing a PIE binary.  
Phase
Assigned (20110201)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
528838 48638 CVE-2011-0726 MLIST:[linux-kernel] 20110311 [PATCH] proc: protect mm start_code/end_code in /proc/pid/stat  View
528839 48638 CVE-2011-0726 URL:https://lkml.org/lkml/2011/3/11/380  View
528840 48638 CVE-2011-0726 MLIST:[mm-commits] 20110314 + proc-protect-mm-start_code-end_code-in-proc-pid-stat.patch added to -mm tree  View
528841 48638 CVE-2011-0726 URL:http://www.spinics.net/lists/mm-commits/msg82726.html  View
528842 48638 CVE-2011-0726 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=5883f57ca0008ffc93e09cbb9847a1928e50c6f3  View
528843 48638 CVE-2011-0726 CONFIRM:http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.39/ChangeLog-2.6.39-rc1  View
528844 48638 CVE-2011-0726 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=684569  View
528845 48638 CVE-2011-0726 CONFIRM:http://downloads.avaya.com/css/P8/documents/100145416  View
528846 48638 CVE-2011-0726 REDHAT:RHSA-2011:0833  View
528847 48638 CVE-2011-0726 URL:http://rhn.redhat.com/errata/RHSA-2011-0833.html  View
528848 48638 CVE-2011-0726 BID:47791  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30905 JVNDB-2011-001144 IBM DB2 の DB2 Administration Server コンポーネントにおける任意のコードを実行される脆弱性 IBM DB2 の DB2 Administration Server (DAS) コンポーネントには、任意のコードを実行される脆弱性が存在します。 CVE-2011-0731 48638 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001144.html  View