NVD

Id
50811  
Name
CVE-2009-3612  
Description
The tcf_fill_node function in net/sched/cls_api.c in the netlink subsystem in the Linux kernel 2.6.x before 2.6.32-rc5, and 2.4.37.6 and earlier, does not initialize a certain tcm__pad2 structure member, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors. NOTE: this issue exists because of an incomplete fix for CVE-2005-4881.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-07  
Published
2009-10-19  
Modified Date
2012-03-19  
Seq
2009-3612  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
257157 50811 CVE-2009-3612 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ad61df918c44316940404891d5082c63e79c256a  View
257158 50811 CVE-2009-3612 SUSE-SA:2009:061  View
257159 50811 CVE-2009-3612 SUSE-SA:2009:064  View
257160 50811 CVE-2009-3612 SUSE-SA:2010:012  View
257161 50811 CVE-2009-3612 [security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates  View
257162 50811 CVE-2009-3612 oval:org.mitre.oval:def:10395  View
257163 50811 CVE-2009-3612 oval:org.mitre.oval:def:7557  View
257164 50811 CVE-2009-3612 http://patchwork.ozlabs.org/patch/35412/  View
257165 50811 CVE-2009-3612 http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc5  View
257166 50811 CVE-2009-3612 MDVSA-2009:329  View
257167 50811 CVE-2009-3612 [oss-security] 20091014 Re: CVE request: kernel: tc: uninitialised kernel memory leak  View
257168 50811 CVE-2009-3612 [oss-security] 20091014 CVE request kernel: tcf_fill_node() infoleak due to typo in 9ef1d4c7  View
257169 50811 CVE-2009-3612 [oss-security] 20091014 Re: CVE request kernel: tcf_fill_node() infoleak due to typo in 9ef1d4c7  View
257170 50811 CVE-2009-3612 [oss-security] 20091015 Re: CVE request kernel: tcf_fill_node() infoleak due to typo in 9ef1d4c7  View
257171 50811 CVE-2009-3612 RHSA-2009:1670  View
257172 50811 CVE-2009-3612 USN-864-1  View
257173 50811 CVE-2009-3612 ADV-2010-0528  View
257174 50811 CVE-2009-3612 https://bugzilla.redhat.com/show_bug.cgi?id=528868  View
257175 50811 CVE-2009-3612 RHSA-2009:1540  View
257176 50811 CVE-2009-3612 FEDORA-2009-11038  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41416 JVNDB-2009-002423 Linux kernel の tcf_fill_node 関数におけるカーネルメモリから重要な情報を取得される脆弱性 Linux kernel の netlink サブシステムの net/sched/cls_api.c の tcf_fill_node 関数には、特定の構造体メンバの tcm__pad2 が初期化されないため、カーネルメモリから重要な情報を取得される脆弱性が存在します。 CVE-2009-3612 41043 CVE-2009-3612 50811 4.9 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002423.html 2009-10-19 2010-04-02 View