NVD

Id
48485  
Name
CVE-2009-1192  
Description
The (1) agp_generic_alloc_page and (2) agp_generic_alloc_pages functions in drivers/char/agp/generic.c in the agp subsystem in the Linux kernel before 2.6.30-rc3 do not zero out pages that may later be available to a user-space process, which allows local users to obtain sensitive information by reading these pages.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-07  
Published
2009-04-24  
Modified Date
2013-08-25  
Seq
2009-1192  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
244370 48485 CVE-2009-1192 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=59de2bebabc5027f93df999d59cc65df591c3e6e  View
244371 48485 CVE-2009-1192 SUSE-SA:2009:032  View
244372 48485 CVE-2009-1192 SUSE-SA:2009:054  View
244373 48485 CVE-2009-1192 SUSE-SA:2009:056  View
244374 48485 CVE-2009-1192 [oss-security] 20090422 CVE-2009-1192 kernel: agp: zero pages before sending to userspace  View
244375 48485 CVE-2009-1192 oval:org.mitre.oval:def:10567  View
244376 48485 CVE-2009-1192 oval:org.mitre.oval:def:8003  View
244377 48485 CVE-2009-1192 http://wiki.rpath.com/Advisories:rPSA-2009-0084  View
244378 48485 CVE-2009-1192 DSA-1787  View
244379 48485 CVE-2009-1192 DSA-1794  View
244380 48485 CVE-2009-1192 DSA-1800  View
244381 48485 CVE-2009-1192 http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.30-rc3  View
244382 48485 CVE-2009-1192 MDVSA-2009:119  View
244383 48485 CVE-2009-1192 MDVSA-2009:135  View
244384 48485 CVE-2009-1192 RHSA-2009:1081  View
244385 48485 CVE-2009-1192 20090516 rPSA-2009-0084-1 kernel  View
244386 48485 CVE-2009-1192 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components  View
244387 48485 CVE-2009-1192 34673  View
244388 48485 CVE-2009-1192 USN-793-1  View
244389 48485 CVE-2009-1192 http://www.vmware.com/security/advisories/VMSA-2009-0016.html  View
244390 48485 CVE-2009-1192 ADV-2009-3316  View
244391 48485 CVE-2009-1192 https://bugzilla.redhat.com/show_bug.cgi?id=497020  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40835 JVNDB-2009-001841 Linux kernel の agp サブシステムにおける情報漏えいの脆弱性 Linux kernel の agp サブシステムにある agp_generic_alloc_page および agp_generic_alloc_pages 関数には、後にユーザスペースプロセスで利用される可能性のあるページを初期化しないため、それらのページを読まれることにより重要な情報を取得される脆弱性が存在します。 CVE-2009-1192 38623 CVE-2009-1192 48485 4.9 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001841.html 2009-04-24 2010-02-17 View