NVD

Id
15216  
Name
CVE-2010-3881  
Description
arch/x86/kvm/x86.c in the Linux kernel before 2.6.36.2 does not initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via read operations on the /dev/kvm device.  
Reject
 
CVSS Version
2  
CVSS Score
1.9  
Severity
Low  
CVSS Base Score
1.9  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2010-12-23  
Modified Date
2012-03-19  
Seq
2010-3881  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
85779 15216 CVE-2010-3881 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=97e69aa62f8b5d338d6cff49be09e37cc1262838  View
85780 15216 CVE-2010-3881 http://git.kernel.org/?p=virt/kvm/kvm.git;a=commit;h=831d9d02f9522e739825a51a11e3bc5aa531a905  View
85781 15216 CVE-2010-3881 SUSE-SA:2011:004  View
85782 15216 CVE-2010-3881 SUSE-SA:2011:007  View
85783 15216 CVE-2010-3881 [oss-security] 20101104 CVE request: kernel: kvm kernel stack leakage  View
85784 15216 CVE-2010-3881 [oss-security] 20101105 Re: CVE request: kernel: kvm kernel stack leakage  View
85785 15216 CVE-2010-3881 RHSA-2010:0998  View
85786 15216 CVE-2010-3881 1024912  View
85787 15216 CVE-2010-3881 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36.2  View
85788 15216 CVE-2010-3881 44666  View
85789 15216 CVE-2010-3881 [kvm] 20101030 [patch v2] x86: kvm: x86: fix information leak to userland  View
85790 15216 CVE-2010-3881 ADV-2010-3287  View
85791 15216 CVE-2010-3881 ADV-2011-0124  View
85792 15216 CVE-2010-3881 ADV-2011-0298  View
85793 15216 CVE-2010-3881 https://bugzilla.redhat.com/show_bug.cgi?id=649920  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36882 JVNDB-2010-002662 Linux kernel の arch/x86/kvm/x86.c における重要な情報を取得される脆弱性 Linux kernel の arch/x86/kvm/x86.c は、特定の構造体のメンバを初期化しないため、重要な情報を取得される脆弱性が存在します。 CVE-2010-3881 46461 CVE-2010-3881 15216 1.9 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002662.html 2010-12-09 2011-06-28 View