CVE

Id
56753  
CVE No.
CVE-2012-3510  
Status
Candidate  
Description
Use-after-free vulnerability in the xacct_add_tsk function in kernel/tsacct.c in the Linux kernel before 2.6.19 allows local users to obtain potentially sensitive information from kernel memory or cause a denial of service (system crash) via a taskstats TASKSTATS_CMD_ATTR_PID command.  
Phase
Assigned (20120614)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
587762 56753 CVE-2012-3510 MLIST:[oss-security] 20120820 Re: CVE Request -- kernel: taskstats: use-after-free in xacct_add_tsk()  View
587763 56753 CVE-2012-3510 URL:http://www.openwall.com/lists/oss-security/2012/08/20/12  View
587764 56753 CVE-2012-3510 CONFIRM:http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.19  View
587765 56753 CVE-2012-3510 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=f0ec1aaf54caddd21c259aea8b2ecfbde4ee4fb9  View
587766 56753 CVE-2012-3510 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=849722  View
587767 56753 CVE-2012-3510 CONFIRM:https://github.com/torvalds/linux/commit/f0ec1aaf54caddd21c259aea8b2ecfbde4ee4fb9  View
587768 56753 CVE-2012-3510 REDHAT:RHSA-2012:1323  View
587769 56753 CVE-2012-3510 URL:http://rhn.redhat.com/errata/RHSA-2012-1323.html  View
587770 56753 CVE-2012-3510 BID:55144  View
587771 56753 CVE-2012-3510 URL:http://www.securityfocus.com/bid/55144  View
587772 56753 CVE-2012-3510 SECTRACK:1027602  View
587773 56753 CVE-2012-3510 URL:http://www.securitytracker.com/id?1027602  View
587774 56753 CVE-2012-3510 SECUNIA:50811  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
29804 JVNDB-2012-005511 Xen および 他の製品で使用される Qemu における権限を取得される脆弱性 Xen および 他の製品で使用される Qemu には、バーチャルコンソールバックエンドを伴う特定のデバイスをエミュレートする場合、権限を取得される脆弱性が存在します。 CVE-2012-3515 56753 7.2 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005511.html  View