[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247974

 
 

909

 
 

194654

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2012-0957Date: (C)2012-12-21   (M)2024-04-19


The override_release function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from kernel stack memory via a uname system call in conjunction with a UNAME26 personality.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 4.9
Exploit Score: 3.9
Impact Score: 6.9
 
CVSS V2 Metrics:
Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality: COMPLETE
Integrity: NONE
Availability: NONE
  
Reference:
SECUNIA-51409
FEDORA-2012-17479
USN-1644-1
USN-1645-1
USN-1646-1
USN-1647-1
USN-1648-1
USN-1649-1
USN-1652-1
http://www.openwall.com/lists/oss-security/2012/10/09/4
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2702b1526c7278c4d65d78de209a465d4de2885e
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.16
https://bugzilla.redhat.com/show_bug.cgi?id=862877
https://github.com/torvalds/linux/commit/2702b1526c7278c4d65d78de209a465d4de2885e

CPE    153
cpe:/o:linux:linux_kernel:3.0.40
cpe:/o:linux:linux_kernel:3.1.10
cpe:/o:linux:linux_kernel:3.0.42
cpe:/o:linux:linux_kernel:3.0.41
...
CWE    1
CWE-16
OVAL    25
oval:org.secpod.oval:def:701090
oval:org.secpod.oval:def:701084
oval:org.secpod.oval:def:1601342
oval:org.secpod.oval:def:104681
...

© SecPod Technologies