NVD

Id
14707  
Name
CVE-2010-3298  
Description
The hso_get_count function in drivers/net/usb/hso.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-18  
Published
2010-09-30  
Modified Date
2012-03-19  
Seq
2010-3298  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
81439 14707 CVE-2010-3298 http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git;a=commit;h=7011e660938fc44ed86319c18a5954e95a82ab3e  View
81440 14707 CVE-2010-3298 SUSE-SA:2010:050  View
81441 14707 CVE-2010-3298 SUSE-SA:2011:007  View
81442 14707 CVE-2010-3298 [linux-kernel] 20100911 [PATCH] drivers/net/usb/hso.c: prevent reading uninitialized memory  View
81443 14707 CVE-2010-3298 http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.36-rc5  View
81444 14707 CVE-2010-3298 [oss-security] 20100914 CVE request: kernel: numerous infoleaks  View
81445 14707 CVE-2010-3298 [oss-security] 20100914 Re: CVE request: kernel: numerous infoleaks  View
81446 14707 CVE-2010-3298 RHSA-2011:0007  View
81447 14707 CVE-2010-3298 43226  View
81448 14707 CVE-2010-3298 USN-1041-1  View
81449 14707 CVE-2010-3298 ADV-2011-0070  View
81450 14707 CVE-2010-3298 ADV-2011-0298  View
81451 14707 CVE-2010-3298 https://bugzilla.redhat.com/show_bug.cgi?id=633140  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36926 JVNDB-2010-002706 Linux kernel の hso_get_count 関数における重要な情報を取得される脆弱性 Linux kernel の drivers/net/usb/hso.c 内にある hso_get_count 関数は、構造体メンバを適切に初期化しないため、kernel スタックメモリから重要な情報を取得される脆弱性が存在します。 CVE-2010-3298 45878 CVE-2010-3298 14707 4.9 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002706.html 2010-09-30 2011-01-28 View