VulnerabilityModified

CVE-2010-2942

MEDIUM 5.5EPSS 0.42%

Does this matter?

Lower severity and a low EPSS score (0.42%). Track it; it rarely justifies an emergency change on its own.

Description

The actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc2 does not properly initialize certain structure members when performing dump operations, which allows local users to obtain potentially sensitive information from kernel memory via vectors related to (1) the tcf_gact_dump function in net/sched/act_gact.c, (2) the tcf_mirred_dump function in net/sched/act_mirred.c, (3) the tcf_nat_dump function in net/sched/act_nat.c, (4) the tcf_simp_dump function in net/sched/act_simple.c, and (5) the tcf_skbedit_dump function in net/sched/act_skbedit.c.

CVSS 3.1: 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS: 0.42% probability · 36th percentile
CISA KEV: Not listed
Weakness: CWE-401
Affected: linux/linux kernel · canonical/ubuntu linux · opensuse/opensuse · suse/suse linux enterprise desktop · suse/suse linux enterprise server · avaya/aura communication manager · avaya/aura presence services · avaya/aura session manager · avaya/aura system manager · avaya/aura system platform · avaya/iq · avaya/voice portal · vmware/esx
Source: secalert@redhat.com

References

http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=1c40be12f7d8ca1d387510d39787b12e512a7ce8
http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.htmlMailing List, Third Party Advisory
http://patchwork.ozlabs.org/patch/61857/Mailing List, Patch, Third Party Advisory
http://secunia.com/advisories/41512Broken Link
http://secunia.com/advisories/46397Broken Link
http://support.avaya.com/css/P8/documents/100113326Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.36-rc2Broken Link
http://www.openwall.com/lists/oss-security/2010/08/18/1Mailing List, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2010/08/19/4Mailing List, Patch, Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2010-0723.htmlBroken Link
http://www.redhat.com/support/errata/RHSA-2010-0771.htmlBroken Link
http://www.redhat.com/support/errata/RHSA-2010-0779.htmlBroken Link
http://www.securityfocus.com/archive/1/520102/100/0/threadedThird Party Advisory, VDB Entry
http://www.securityfocus.com/bid/42529Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-1000-1Third Party Advisory
http://www.vmware.com/security/advisories/VMSA-2011-0012.htmlThird Party Advisory
http://www.vupen.com/english/advisories/2010/2430Broken Link
http://www.vupen.com/english/advisories/2011/0298Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=624903Issue Tracking, Patch, Third Party Advisory
http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=1c40be12f7d8ca1d387510d39787b12e512a7ce8
http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.htmlMailing List, Third Party Advisory
http://patchwork.ozlabs.org/patch/61857/Mailing List, Patch, Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.