NVD

Id
9443  
Name
CVE-2011-2707  
Description
The ptrace_setxregs function in arch/xtensa/kernel/ptrace.c in the Linux kernel before 3.1 does not validate user-space pointers, which allows local users to obtain sensitive information from kernel memory locations via a crafted PTRACE_SETXTREGS request.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-07  
Published
2012-05-24  
Modified Date
2012-05-29  
Seq
2011-2707  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
53941 9443 CVE-2011-2707 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=0d0138ebe24b94065580bd2601f8bb7eb6152f56  View
53942 9443 CVE-2011-2707 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1  View
53943 9443 CVE-2011-2707 [oss-security] 20110720 Re: CVE request: kernel: arbitrary kernel read in xtensa  View
53944 9443 CVE-2011-2707 https://github.com/torvalds/linux/commit/0d0138ebe24b94065580bd2601f8bb7eb6152f56  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26832 JVNDB-2012-002539 Linux Kernel の ptrace_setxregs 関数における重要な情報を取得される脆弱性 Linux Kernel の arch/xtensa/kernel/ptrace.c 内の ptrace_setxregs 関数は、ユーザスペースへのポインタを適切に検証しないため、カーネルメモリから重要な情報を取得される脆弱性が存在します。 CVE-2011-2707 50614 CVE-2011-2707 9443 4.9 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002539.html 2012-05-24 2012-05-28 View