NVD

Id
15381  
Name
CVE-2010-4073  
Description
The ipc subsystem in the Linux kernel before 2.6.37-rc1 does not initialize certain structures, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to the (1) compat_sys_semctl, (2) compat_sys_msgctl, and (3) compat_sys_shmctl functions in ipc/compat.c; and the (4) compat_sys_mq_open and (5) compat_sys_mq_getsetattr functions in ipc/compat_mq.c.  
Reject
 
CVSS Version
2  
CVSS Score
1.9  
Severity
Low  
CVSS Base Score
1.9  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2010-11-29  
Modified Date
2012-03-19  
Seq
2010-4073  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
86638 15381 CVE-2010-4073 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=03145beb455cf5c20a761e8451e30b8a74ba58d9  View
86639 15381 CVE-2010-4073 SUSE-SA:2010:060  View
86640 15381 CVE-2010-4073 SUSE-SA:2011:001  View
86641 15381 CVE-2010-4073 SUSE-SA:2011:004  View
86642 15381 CVE-2010-4073 SUSE-SA:2011:007  View
86643 15381 CVE-2010-4073 SUSE-SA:2011:008  View
86644 15381 CVE-2010-4073 [linux-kernel] 20101006 [PATCH v3] IPC: Initialize structure memory to zero for compat functions  View
86645 15381 CVE-2010-4073 8366  View
86646 15381 CVE-2010-4073 DSA-2126  View
86647 15381 CVE-2010-4073 http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.37-rc1  View
86648 15381 CVE-2010-4073 MDVSA-2011:029  View
86649 15381 CVE-2010-4073 MDVSA-2011:051  View
86650 15381 CVE-2010-4073 [oss-security] 20101006 Re: CVE request: multiple kernel stack memory disclosures  View
86651 15381 CVE-2010-4073 [oss-security] 20101025 Re: CVE request: multiple kernel stack memory disclosures  View
86652 15381 CVE-2010-4073 RHSA-2010:0958  View
86653 15381 CVE-2010-4073 RHSA-2011:0007  View
86654 15381 CVE-2010-4073 RHSA-2011:0017  View
86655 15381 CVE-2010-4073 RHSA-2011:0162  View
86656 15381 CVE-2010-4073 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console  View
86657 15381 CVE-2010-4073 45073  View
86658 15381 CVE-2010-4073 http://www.vmware.com/security/advisories/VMSA-2011-0012.html  View
86659 15381 CVE-2010-4073 ADV-2011-0012  View
86660 15381 CVE-2010-4073 ADV-2011-0124  View
86661 15381 CVE-2010-4073 ADV-2011-0168  View
86662 15381 CVE-2010-4073 ADV-2011-0298  View
86663 15381 CVE-2010-4073 ADV-2011-0375  View
86664 15381 CVE-2010-4073 https://bugzilla.redhat.com/show_bug.cgi?id=648658  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36935 JVNDB-2010-002715 Linux kernel の ipc サブシステムにおける重要な情報を取得される脆弱性 Linux kernel の ipc サブシステムは、構造体を初期化しないため、kernel スタックメモリから重要な情報を取得される脆弱性が存在します。 CVE-2010-4073 46653 CVE-2010-4073 15381 1.9 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002715.html 2010-11-29 2012-12-21 View