NVD

Id
8026  
Name
CVE-2011-1044  
Description
The ib_uverbs_poll_cq function in drivers/infiniband/core/uverbs_cmd.c in the Linux kernel before 2.6.37 does not initialize a certain response buffer, which allows local users to obtain potentially sensitive information from kernel memory via vectors that cause this buffer to be only partially filled, a different vulnerability than CVE-2010-4649.  
Reject
 
CVSS Version
2  
CVSS Score
1.9  
Severity
Low  
CVSS Base Score
1.9  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2011-02-18  
Modified Date
2014-01-13  
Seq
2011-1044  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
45724 8026 CVE-2011-1044 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=7182afea8d1afd432a17c18162cc3fd441d0da93  View
45725 8026 CVE-2011-1044 RHSA-2011:0927  View
45726 8026 CVE-2011-1044 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37  View
45727 8026 CVE-2011-1044 46488  View
45728 8026 CVE-2011-1044 kernel-ibuverbspollcq-info-disclosure(65563)  View
45729 8026 CVE-2011-1044 https://bugzilla.redhat.com/show_bug.cgi?id=667916  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31144 JVNDB-2011-001383 Linux kernel の ib_uverbs_poll_cq 関数における重要な情報を取得される脆弱性 Linux kernel の drivers/infiniband/core/uverbs_cmd.c 内にある ib_uverbs_poll_cq 関数には、レスポンスバッファを初期化しないため、カーネルメモリから重要な情報を取得される脆弱性が存在します。 CVE-2011-1044 48951 CVE-2011-1044 8026 1.9 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001383.html 2011-01-04 2012-12-19 View