NVD

Id
15196  
Name
CVE-2010-3861  
Description
The ethtool_get_rxnfc function in net/core/ethtool.c in the Linux kernel before 2.6.36 does not initialize a certain block of heap memory, which allows local users to obtain potentially sensitive information via an ETHTOOL_GRXCLSRLALL ethtool command with a large info.rule_cnt value, a different vulnerability than CVE-2010-2478.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2010-12-10  
Modified Date
2012-03-19  
Seq
2010-3861  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
85513 15196 CVE-2010-3861 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ae6df5f96a51818d6376da5307d773baeece4014  View
85514 15196 CVE-2010-3861 SUSE-SA:2011:001  View
85515 15196 CVE-2010-3861 SUSE-SA:2011:002  View
85516 15196 CVE-2010-3861 SUSE-SA:2011:004  View
85517 15196 CVE-2010-3861 SUSE-SA:2011:007  View
85518 15196 CVE-2010-3861 [oss-security] 20101025 CVE request: kernel: heap contents leak from ETHTOOL_GRXCLSRLALL  View
85519 15196 CVE-2010-3861 [oss-security] 20101026 Re: CVE request: kernel: heap contents leak from ETHTOOL_GRXCLSRLALL  View
85520 15196 CVE-2010-3861 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36  View
85521 15196 CVE-2010-3861 RHSA-2010:0958  View
85522 15196 CVE-2010-3861 RHSA-2011:0007  View
85523 15196 CVE-2010-3861 44427  View
85524 15196 CVE-2010-3861 USN-1041-1  View
85525 15196 CVE-2010-3861 ADV-2011-0012  View
85526 15196 CVE-2010-3861 ADV-2011-0070  View
85527 15196 CVE-2010-3861 ADV-2011-0124  View
85528 15196 CVE-2010-3861 ADV-2011-0298  View
85529 15196 CVE-2010-3861 https://bugzilla.redhat.com/show_bug.cgi?id=646725  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36927 JVNDB-2010-002707 Linux kernel の ethtool_get_rxnfc 関数における重要な情報を取得される脆弱性 Linux kernel の net/core/ethtool.c 内にある ethtool_get_rxnfc 関数は、ヒープメモリのブロックを初期化しないため、重要な情報を取得される脆弱性が存在します。 CVE-2010-3861 46441 CVE-2010-3861 15196 2.1 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002707.html 2010-12-10 2011-01-31 View