NVD

Id
15382  
Name
CVE-2010-4074  
Description
The USB subsystem in the Linux kernel before 2.6.36-rc5 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to TIOCGICOUNT ioctl calls, and the (1) mos7720_ioctl function in drivers/usb/serial/mos7720.c and (2) mos7840_ioctl function in drivers/usb/serial/mos7840.c.  
Reject
 
CVSS Version
2  
CVSS Score
1.9  
Severity
Low  
CVSS Base Score
1.9  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2010-11-29  
Modified Date
2012-03-19  
Seq
2010-4074  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
86665 15382 CVE-2010-4074 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=a0846f1868b11cd827bdfeaf4527d8b1b1c0b098  View
86666 15382 CVE-2010-4074 [linux-kernel] 20100915 [PATCH] drivers/usb/serial/mos*: prevent reading uninitialized stack memory  View
86667 15382 CVE-2010-4074 DSA-2126  View
86668 15382 CVE-2010-4074 http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.36/ChangeLog-2.6.36-rc5  View
86669 15382 CVE-2010-4074 [oss-security] 20100925 CVE request: multiple kernel stack memory disclosures  View
86670 15382 CVE-2010-4074 [oss-security] 20101006 Re: CVE request: multiple kernel stack memory disclosures  View
86671 15382 CVE-2010-4074 [oss-security] 20101006 Re: CVE request: multiple kernel stack memory disclosures  View
86672 15382 CVE-2010-4074 [oss-security] 20101025 Re: CVE request: multiple kernel stack memory disclosures  View
86673 15382 CVE-2010-4074 RHSA-2010:0958  View
86674 15382 CVE-2010-4074 RHSA-2011:0007  View
86675 15382 CVE-2010-4074 45074  View
86676 15382 CVE-2010-4074 https://bugzilla.redhat.com/show_bug.cgi?id=648659  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36928 JVNDB-2010-002708 Linux kernel の USB サブシステムにおける重要な情報を取得される脆弱性 Linux kernel の USB サブシステムは、構造体メンバを適切に初期化しないため、kernel スタックメモリから重要な情報を取得される脆弱性が存在します。 CVE-2010-4074 46654 CVE-2010-4074 15382 1.9 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002708.html 2010-11-29 2011-01-31 View