PT-2010-5698 · Suse+2 · Cpint-Kmp-Default+4
CVE-2010-3078
·
Publicado
1970-01-01
·
Atualizado
2023-02-13
CVSS v2.0
7.2
Alta
| Vetor | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 2.6.36-rc4
cpint-kmp-default (affected versions not specified)
drbd-kmp-default (affected versions not specified)
cloop-kmp-default (affected versions not specified)
Description
The issue allows local users to obtain potentially sensitive information from kernel stack memory via an ioctl call. Multiple vulnerabilities in the cpint-kmp-default, drbd-kmp-default, and cloop-kmp-default packages of SUSE Linux Enterprise and openSUSE operating systems can be exploited locally, leading to a breach of confidentiality, integrity, and availability of protected information.
Recommendations
For Linux kernel versions prior to 2.6.36-rc4, update to version 2.6.36-rc4 or later.
For cpint-kmp-default, drbd-kmp-default, and cloop-kmp-default packages, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Linux Kernel
Red Hat
Cloop-Kmp-Default
Cpint-Kmp-Default
Drbd-Kmp-Default