NVD

Id
15380  
Name
CVE-2010-4072  
Description
The copy_shmid_to_user function in ipc/shm.c in the Linux kernel before 2.6.37-rc1 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to the shmctl system call and the "old shm interface."  
Reject
 
CVSS Version
2  
CVSS Score
1.9  
Severity
Low  
CVSS Base Score
1.9  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2010-11-29  
Modified Date
2012-03-19  
Seq
2010-4072  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
86608 15380 CVE-2010-4072 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=3af54c9bd9e6f14f896aac1bb0e8405ae0bc7a44  View
86609 15380 CVE-2010-4072 SUSE-SA:2010:060  View
86610 15380 CVE-2010-4072 SUSE-SA:2011:001  View
86611 15380 CVE-2010-4072 SUSE-SA:2011:004  View
86612 15380 CVE-2010-4072 SUSE-SA:2011:007  View
86613 15380 CVE-2010-4072 SUSE-SA:2011:008  View
86614 15380 CVE-2010-4072 [linux-kernel] 20101006 [PATCH] ipc: initialize structure memory to zero for shmctl  View
86615 15380 CVE-2010-4072 DSA-2126  View
86616 15380 CVE-2010-4072 http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.37-rc1  View
86617 15380 CVE-2010-4072 MDVSA-2011:029  View
86618 15380 CVE-2010-4072 MDVSA-2011:051  View
86619 15380 CVE-2010-4072 [oss-security] 20101006 Re: CVE request: multiple kernel stack memory disclosures  View
86620 15380 CVE-2010-4072 [oss-security] 20101025 Re: CVE request: multiple kernel stack memory disclosures  View
86621 15380 CVE-2010-4072 RHSA-2010:0958  View
86622 15380 CVE-2010-4072 RHSA-2011:0007  View
86623 15380 CVE-2010-4072 RHSA-2011:0017  View
86624 15380 CVE-2010-4072 RHSA-2011:0162  View
86625 15380 CVE-2010-4072 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console  View
86626 15380 CVE-2010-4072 45054  View
86627 15380 CVE-2010-4072 USN-1041-1  View
86628 15380 CVE-2010-4072 USN-1057-1  View
86629 15380 CVE-2010-4072 http://www.vmware.com/security/advisories/VMSA-2011-0012.html  View
86630 15380 CVE-2010-4072 ADV-2011-0012  View
86631 15380 CVE-2010-4072 ADV-2011-0070  View
86632 15380 CVE-2010-4072 ADV-2011-0124  View
86633 15380 CVE-2010-4072 ADV-2011-0168  View
86634 15380 CVE-2010-4072 ADV-2011-0280  View
86635 15380 CVE-2010-4072 ADV-2011-0298  View
86636 15380 CVE-2010-4072 ADV-2011-0375  View
86637 15380 CVE-2010-4072 https://bugzilla.redhat.com/show_bug.cgi?id=648656  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36934 JVNDB-2010-002714 Linux kernel の copy_shmid_to_user 関数における重要な情報を取得される脆弱性 Linux kernel の ipc/shm.c 内にある copy_shmid_to_user 関数は、構造体を初期化しないため、kernel スタックメモリから重要な情報を取得される脆弱性が存在します。 CVE-2010-4072 46652 CVE-2010-4072 15380 1.9 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002714.html 2010-11-29 2012-12-21 View