NVD

Id
15387  
Name
CVE-2010-4079  
Description
The ivtvfb_ioctl function in drivers/media/video/ivtv/ivtvfb.c in the Linux kernel before 2.6.36-rc8 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an FBIOGET_VBLANK ioctl call.  
Reject
 
CVSS Version
2  
CVSS Score
1.9  
Severity
Low  
CVSS Base Score
1.9  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2010-11-29  
Modified Date
2012-03-19  
Seq
2010-4079  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
86727 15387 CVE-2010-4079 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=405707985594169cfd0b1d97d29fcb4b4c6f2ac9  View
86728 15387 CVE-2010-4079 [linux-kernel] 20100915 [PATCH] drivers/media/video/ivtv/ivtvfb.c: prevent reading uninitialized stack memory  View
86729 15387 CVE-2010-4079 DSA-2126  View
86730 15387 CVE-2010-4079 http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.36/ChangeLog-2.6.36-rc8  View
86731 15387 CVE-2010-4079 [oss-security] 20100925 CVE request: multiple kernel stack memory disclosures  View
86732 15387 CVE-2010-4079 [oss-security] 20101006 Re: CVE request: multiple kernel stack memory disclosures  View
86733 15387 CVE-2010-4079 [oss-security] 20101006 Re: CVE request: multiple kernel stack memory disclosures  View
86734 15387 CVE-2010-4079 [oss-security] 20101025 Re: CVE request: multiple kernel stack memory disclosures  View
86735 15387 CVE-2010-4079 RHSA-2010:0958  View
86736 15387 CVE-2010-4079 RHSA-2011:0007  View
86737 15387 CVE-2010-4079 45062  View
86738 15387 CVE-2010-4079 https://bugzilla.redhat.com/show_bug.cgi?id=648666  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36929 JVNDB-2010-002709 Linux kernel の ivtvfb_ioctl 関数における重要な情報を取得される脆弱性 Linux kernel の drivers/media/video/ivtv/ivtvfb.c 内にある ivtvfb_ioctl 関数は、構造体メンバを適切に初期化しないため、kernel スタックメモリから重要な情報を取得される脆弱性が存在します。 CVE-2010-4079 46659 CVE-2010-4079 15387 1.9 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002709.html 2010-11-29 2011-01-31 View