NVD

Id
15900  
Name
CVE-2010-4655  
Description
net/core/ethtool.c in the Linux kernel before 2.6.36 does not initialize certain data structures, which allows local users to obtain potentially sensitive information from kernel heap memory by leveraging the CAP_NET_ADMIN capability for an ethtool ioctl call.  
Reject
 
CVSS Version
2  
CVSS Score
1.2  
Severity
Low  
CVSS Base Score
1.2  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2011-07-18  
Modified Date
2012-03-19  
Seq
2010-4655  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
90123 15900 CVE-2010-4655 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=b00916b189d13a615ff05c9242201135992fcda3  View
90124 15900 CVE-2010-4655 [oss-security] 20110124 CVE request: linux kernel heap issues  View
90125 15900 CVE-2010-4655 [oss-security] 20110124 Re: CVE request: linux kernel heap issues  View
90126 15900 CVE-2010-4655 [oss-security] 20110125 Re: CVE request: linux kernel heap issues  View
90127 15900 CVE-2010-4655 [oss-security] 20110125 Re: CVE request: linux kernel heap issues  View
90128 15900 CVE-2010-4655 [oss-security] 20110128 Re: CVE request: linux kernel heap issues  View
90129 15900 CVE-2010-4655 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36  View
90130 15900 CVE-2010-4655 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console  View
90131 15900 CVE-2010-4655 45972  View
90132 15900 CVE-2010-4655 USN-1146-1  View
90133 15900 CVE-2010-4655 http://www.vmware.com/security/advisories/VMSA-2011-0012.html  View
90134 15900 CVE-2010-4655 https://bugzilla.redhat.com/show_bug.cgi?id=672428  View
90135 15900 CVE-2010-4655 [linux-kernel] 20101007 [PATCH] net: clear heap allocations for privileged ethtool actions  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31866 JVNDB-2011-002106 Linux kernel の net/core/ethtool.c における重要な情報を取得される脆弱性 Linux kernel の net/core/ethtool.c は、データ構造を初期化しないため、kernel ヒープメモリから重要な情報を取得される脆弱性が存在します。 CVE-2010-4655 47235 CVE-2010-4655 15900 1.2 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002106.html 2011-03-01 2011-08-17 View