NVD

Id
9618  
Name
CVE-2011-2898  
Description
net/packet/af_packet.c in the Linux kernel before 2.6.39.3 does not properly restrict user-space access to certain packet data structures associated with VLAN Tag Control Information, which allows local users to obtain potentially sensitive information via a crafted application.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-07  
Published
2012-05-24  
Modified Date
2012-05-29  
Seq
2011-2898  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
54952 9618 CVE-2011-2898 http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39.3  View
54953 9618 CVE-2011-2898 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=13fcb7bd322164c67926ffe272846d4860196dc6  View
54954 9618 CVE-2011-2898 [oss-security] 20110803 Re: CVE request: Linux kernel af_packet information leak  View
54955 9618 CVE-2011-2898 https://bugzilla.redhat.com/show_bug.cgi?id=728023  View
54956 9618 CVE-2011-2898 https://github.com/torvalds/linux/commit/13fcb7bd322164c67926ffe272846d4860196dc6  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26833 JVNDB-2012-002540 Linux Kernel の net/packet/af_packet.c における重要な情報を取得される脆弱性 Linux Kernel の net/packet/af_packet.c は、VLAN タグ制御情報 (VLAN Tag Control Information) に関連付けられた特定のパケットのデータ構造へのユーザスペースアクセスを適切に制限しないため、重要な情報を取得される脆弱性が存在します。 CVE-2011-2898 50805 CVE-2011-2898 9618 4.9 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002540.html 2012-05-24 2012-05-28 View