NVD

Id
14373  
Name
CVE-2010-2942  
Description
The actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc2 does not properly initialize certain structure members when performing dump operations, which allows local users to obtain potentially sensitive information from kernel memory via vectors related to (1) the tcf_gact_dump function in net/sched/act_gact.c, (2) the tcf_mirred_dump function in net/sched/act_mirred.c, (3) the tcf_nat_dump function in net/sched/act_nat.c, (4) the tcf_simp_dump function in net/sched/act_simple.c, and (5) the tcf_skbedit_dump function in net/sched/act_skbedit.c.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2010-09-21  
Modified Date
2012-03-19  
Seq
2010-2942  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
79501 14373 CVE-2010-2942 http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git;a=commit;h=1c40be12f7d8ca1d387510d39787b12e512a7ce8  View
79502 14373 CVE-2010-2942 SUSE-SA:2010:040  View
79503 14373 CVE-2010-2942 SUSE-SA:2010:041  View
79504 14373 CVE-2010-2942 SUSE-SA:2010:054  View
79505 14373 CVE-2010-2942 SUSE-SA:2010:060  View
79506 14373 CVE-2010-2942 SUSE-SA:2011:007  View
79507 14373 CVE-2010-2942 http://patchwork.ozlabs.org/patch/61857/  View
79508 14373 CVE-2010-2942 http://support.avaya.com/css/P8/documents/100113326  View
79509 14373 CVE-2010-2942 http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.36-rc2  View
79510 14373 CVE-2010-2942 [oss-security] 20100818 CVE request - kernel: net sched memleak  View
79511 14373 CVE-2010-2942 [oss-security] 20100819 Re: CVE request - kernel: net sched memleak  View
79512 14373 CVE-2010-2942 RHSA-2010:0723  View
79513 14373 CVE-2010-2942 RHSA-2010:0771  View
79514 14373 CVE-2010-2942 RHSA-2010:0779  View
79515 14373 CVE-2010-2942 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console  View
79516 14373 CVE-2010-2942 42529  View
79517 14373 CVE-2010-2942 USN-1000-1  View
79518 14373 CVE-2010-2942 http://www.vmware.com/security/advisories/VMSA-2011-0012.html  View
79519 14373 CVE-2010-2942 ADV-2010-2430  View
79520 14373 CVE-2010-2942 ADV-2011-0298  View
79521 14373 CVE-2010-2942 https://bugzilla.redhat.com/show_bug.cgi?id=624903  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36354 JVNDB-2010-002134 Linux kernel のネットワークキューイング機能の実装における重要な情報を取得される脆弱性 Linux kernel のネットワークキューイング機能の実装には、以下の関数の処理に関して不備があり、ダンプの操作が実行されている際、特定の構造体のメンバを初期化しないため、カーネルメモリから重要な情報を取得される脆弱性が存在します。 CVE-2010-2942 45522 CVE-2010-2942 14373 2.1 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002134.html 2010-08-01 2012-12-26 View