NVD

Id
56691  
Name
CVE-2007-4571  
Description
The snd_mem_proc_read function in sound/core/memalloc.c in the Advanced Linux Sound Architecture (ALSA) in the Linux kernel before 2.6.22.8 does not return the correct write size, which allows local users to obtain sensitive information (kernel memory contents) via a small count argument, as demonstrated by multiple reads of /proc/driver/snd-page-alloc.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-09-26  
Modified Date
2011-03-07  
Seq
2007-4571  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
288939 56691 CVE-2007-4571 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ccec6e2c4a74adf76ed4e2478091a311b1806212  View
288940 56691 CVE-2007-4571 http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.8  View
288941 56691 CVE-2007-4571 20070925 Linux Kernel ALSA snd_mem_proc_read Information Disclosure Vulnerability  View
288942 56691 CVE-2007-4571 oval:org.mitre.oval:def:9053  View
288943 56691 CVE-2007-4571 http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm  View
288944 56691 CVE-2007-4571 DSA-1479  View
288945 56691 CVE-2007-4571 DSA-1505  View
288946 56691 CVE-2007-4571 SUSE-SA:2007:053  View
288947 56691 CVE-2007-4571 RHSA-2007:0939  View
288948 56691 CVE-2007-4571 RHSA-2007:0993  View
288949 56691 CVE-2007-4571 25807  View
288950 56691 CVE-2007-4571 1018734  View
288951 56691 CVE-2007-4571 USN-618-1  View
288952 56691 CVE-2007-4571 ADV-2007-3272  View
288953 56691 CVE-2007-4571 linux-sndpagealloc-information-disclosure(36780)  View
288954 56691 CVE-2007-4571 https://issues.rpath.com/browse/RPL-1761  View
288955 56691 CVE-2007-4571 FEDORA-2007-714  View
288956 56691 CVE-2007-4571 FEDORA-2007-2349  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52129 JVNDB-2007-000792 Linux Kernel の ALSA ドライバにおけるカーネルメモリの情報漏えいの脆弱性 Linux Kernel の Advanced Linux Sound Architecture (ALSA) ドライバには、sound/core/memalloc.c の snd_mem_proc_read() 関数において、書き込みサイズの返り値が不適切に処理されるために、カーネルメモリの情報が漏えいする脆弱性が存在します。 CVE-2007-4571 27926 CVE-2007-4571 56691 2.1 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000792.html 2007-10-24 2008-10-30 View