CVE-2010-2942 The actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc2 does not properly initialize certain structure members when performing dump operations, which all...
MediumCVSS 5.5
EPSS 0.42%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc2 does not properly initialize certain structure members when performing dump operations, which allows local users to obtain potentially sensitive information from kernel memory via vectors related to (1) the tcf_gact_dump function in net/sched/act_gact.c, (2) the tcf_mirred_dump function in net/sched/act_mirred.c, (3) the tcf_nat_dump function in net/sched/act_nat.c, (4) the tcf_simp_dump function in net/sched/act_simple.c, and (5) the tcf_skbedit_dump function in net/sched/act_skbedit.c.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux kernel | <= 2.6.35.13 | No fix listed |
| Linux kernel | = 2.6.36 | No fix listed |
| Linux kernel | = 2.6.36-rc1 | No fix listed |
| Canonical Ubuntu Linux | = 6.06 | No fix listed |
| Canonical Ubuntu Linux | = 8.04 | No fix listed |
| Canonical Ubuntu Linux | = 9.04 | No fix listed |
| Canonical Ubuntu Linux | = 9.10 | No fix listed |
| Canonical Ubuntu Linux | = 10.04 | No fix listed |
| Canonical Ubuntu Linux | = 10.10 | No fix listed |
| opensuse | = 11.1 | No fix listed |
| opensuse | = 11.3 | No fix listed |
| suse linux enterprise desktop | = 10-sp3 | No fix listed |
| suse linux enterprise desktop | = 11 | No fix listed |
| suse linux enterprise desktop | = 11-sp1 | No fix listed |
| suse linux enterprise server | = 10-sp3 | No fix listed |
| suse linux enterprise server | = 11 | No fix listed |
| suse linux enterprise server | = 11-sp1 | No fix listed |
| avaya aura communication manager | = 5.2 | No fix listed |
| avaya aura presence services | = 6.0 | No fix listed |
| avaya aura presence services | = 6.1 | No fix listed |
| avaya aura presence services | = 6.1.1 | No fix listed |
| avaya aura session manager | = 1.1 | No fix listed |
| avaya aura session manager | = 5.2 | No fix listed |
| avaya aura session manager | = 6.0 | No fix listed |
| avaya aura system manager | = 5.2 | No fix listed |
Show 13 more
| Product | Affected versions | Fixed in |
|---|---|---|
| avaya aura system manager | = 6.0 | No fix listed |
| avaya aura system manager | = 6.1 | No fix listed |
| avaya aura system manager | = 6.1.1 | No fix listed |
| avaya aura system platform | = 1.1 | No fix listed |
| avaya aura system platform | = 6.0 | No fix listed |
| avaya aura system platform | = 6.0-sp1 | No fix listed |
| avaya iq | = 5.0 | No fix listed |
| avaya iq | = 5.1 | No fix listed |
| avaya voice portal | = 5.0 | No fix listed |
| avaya voice portal | = 5.1 | No fix listed |
| avaya voice portal | = 5.1-sp1 | No fix listed |
| VMware ESX | = 4.0 | No fix listed |
| VMware ESX | = 4.1 | No fix listed |
References
- git.kernel.org
- SUSE-SA:2010:040 mailing-list third-party-advisory vendor-advisory
- SUSE-SA:2010:041 mailing-list third-party-advisory vendor-advisory
- SUSE-SA:2010:054 mailing-list third-party-advisory vendor-advisory
- SUSE-SA:2010:060 mailing-list third-party-advisory vendor-advisory
- SUSE-SA:2011:007 mailing-list third-party-advisory vendor-advisory
- patchwork.ozlabs.org mailing-list patch third-party-advisory
- 41512 broken-link third-party-advisory
- 46397 broken-link third-party-advisory
- support.avaya.com third-party-advisory
- www.kernel.org broken-link
- [oss-security] 20100818 CVE request - kernel: net sched memleak mailing-list patch third-party-advisory
- [oss-security] 20100819 Re: CVE request - kernel: net sched memleak mailing-list patch third-party-advisory
- RHSA-2010:0723 broken-link vendor-advisory
- RHSA-2010:0771 broken-link vendor-advisory
- RHSA-2010:0779 broken-link vendor-advisory
- 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console mailing-list third-party-advisory vdb-entry
- 42529 third-party-advisory vdb-entry
- USN-1000-1 third-party-advisory vendor-advisory
- www.vmware.com third-party-advisory
- ADV-2010-2430 broken-link vdb-entry
- ADV-2011-0298 broken-link vdb-entry
- bugzilla.redhat.com issue-tracking patch third-party-advisory