NVD

Id
14857  
Name
CVE-2010-3477  
Description
The tcf_act_police_dump function in net/sched/act_police.c in the actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc4 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel memory via vectors involving a dump operation. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-2942.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2010-09-21  
Modified Date
2012-03-19  
Seq
2010-3477  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
82344 14857 CVE-2010-3477 http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git;a=commit;h=0f04cfd098fb81fded74e78ea1a1b86cc6c6c31e  View
82345 14857 CVE-2010-3477 DSA-2126  View
82346 14857 CVE-2010-3477 http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.36-rc4  View
82347 14857 CVE-2010-3477 RHSA-2010:0779  View
82348 14857 CVE-2010-3477 RHSA-2010:0839  View
82349 14857 CVE-2010-3477 RHSA-2011:0007  View
82350 14857 CVE-2010-3477 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console  View
82351 14857 CVE-2010-3477 1024603  View
82352 14857 CVE-2010-3477 USN-1000-1  View
82353 14857 CVE-2010-3477 http://www.vmware.com/security/advisories/VMSA-2011-0012.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36517 JVNDB-2010-002297 Linux kernel のネットワークキューイング機能の実装における重要な情報を取得される脆弱性 Linux kernel のネットワークキューイング機能の実装における net/sched/act_police.c の tcf_act_police_dump 関数には、特定の構造体のメンバを適切に初期化しないため、カーネルメモリから重要な情報を取得される脆弱性が存在します。 CVE-2010-3477 46057 CVE-2010-3477 14857 2.1 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002297.html 2010-09-21 2012-12-21 View