CVE-2010-3078

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2010-3078
The xfs_ioc_fsgetxattr function in fs/xfs/linux-2.6/xfs_ioctl.c in the Linux kernel before 2.6.36-rc4 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an ioctl call.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

2.1 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a122eb2fdfd78b58c6dd992d6f4b1aaef667eef9
http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html Mailing List Third Party Advisory
http://secunia.com/advisories/41284 Broken Link
http://secunia.com/advisories/41512 Broken Link
http://secunia.com/advisories/42890 Broken Link
http://secunia.com/advisories/46397 Broken Link
http://securitytracker.com/id?1024418 Third Party Advisory VDB Entry
http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.36-rc4 Broken Link
http://www.linux.sgi.com/archives/xfs-masters/2010-09/msg00002.html Broken Link
http://www.openwall.com/lists/oss-security/2010/09/07/1 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2010/09/07/12 Mailing List Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2010-0839.html Broken Link
http://www.redhat.com/support/errata/RHSA-2011-0007.html Broken Link
http://www.securityfocus.com/archive/1/520102/100/0/threaded Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/43022 Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-1000-1 Third Party Advisory
http://www.vmware.com/security/advisories/VMSA-2011-0012.html Third Party Advisory
http://www.vupen.com/english/advisories/2010/2430 Broken Link
http://www.vupen.com/english/advisories/2011/0298 Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=630804 Issue Tracking Patch Third Party Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a122eb2fdfd78b58c6dd992d6f4b1aaef667eef9
http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html Mailing List Third Party Advisory
http://secunia.com/advisories/41284 Broken Link
http://secunia.com/advisories/41512 Broken Link
http://secunia.com/advisories/42890 Broken Link
http://secunia.com/advisories/46397 Broken Link
http://securitytracker.com/id?1024418 Third Party Advisory VDB Entry
http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.36-rc4 Broken Link
http://www.linux.sgi.com/archives/xfs-masters/2010-09/msg00002.html Broken Link
http://www.openwall.com/lists/oss-security/2010/09/07/1 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2010/09/07/12 Mailing List Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2010-0839.html Broken Link
http://www.redhat.com/support/errata/RHSA-2011-0007.html Broken Link
http://www.securityfocus.com/archive/1/520102/100/0/threaded Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/43022 Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-1000-1 Third Party Advisory
http://www.vmware.com/security/advisories/VMSA-2011-0012.html Third Party Advisory
http://www.vupen.com/english/advisories/2010/2430 Broken Link
http://www.vupen.com/english/advisories/2011/0298 Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=630804 Issue Tracking Patch Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.36:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.36:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.36:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.36:rc3:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:*
cpe:2.3:o:suse:suse_linux_enterprise_desktop:11:sp1:*:*:*:*:*:*
cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp1:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*

Configuration 4 (hide)

OR cpe:2.3:o:vmware:esx:4.0:*:*:*:*:*:*:*
cpe:2.3:o:vmware:esx:4.1:*:*:*:*:*:*:*
History

21 Nov 2024, 01:17

Type Values Removed Values Added
References () http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a122eb2fdfd78b58c6dd992d6f4b1aaef667eef9 - () http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a122eb2fdfd78b58c6dd992d6f4b1aaef667eef9 -
References () http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html - Mailing List, Third Party Advisory () http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html - Mailing List, Third Party Advisory
References () http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html - Mailing List, Third Party Advisory () http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html - Mailing List, Third Party Advisory
References () http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html - Mailing List, Third Party Advisory () http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html - Mailing List, Third Party Advisory
References () http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - Mailing List, Third Party Advisory () http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - Mailing List, Third Party Advisory
References () http://secunia.com/advisories/41284 - Broken Link () http://secunia.com/advisories/41284 - Broken Link
References () http://secunia.com/advisories/41512 - Broken Link () http://secunia.com/advisories/41512 - Broken Link
References () http://secunia.com/advisories/42890 - Broken Link () http://secunia.com/advisories/42890 - Broken Link
References () http://secunia.com/advisories/46397 - Broken Link () http://secunia.com/advisories/46397 - Broken Link
References () http://securitytracker.com/id?1024418 - Third Party Advisory, VDB Entry () http://securitytracker.com/id?1024418 - Third Party Advisory, VDB Entry
References () http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.36-rc4 - Broken Link () http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.36-rc4 - Broken Link
References () http://www.linux.sgi.com/archives/xfs-masters/2010-09/msg00002.html - Broken Link () http://www.linux.sgi.com/archives/xfs-masters/2010-09/msg00002.html - Broken Link
References () http://www.openwall.com/lists/oss-security/2010/09/07/1 - Mailing List, Third Party Advisory () http://www.openwall.com/lists/oss-security/2010/09/07/1 - Mailing List, Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2010/09/07/12 - Mailing List, Third Party Advisory () http://www.openwall.com/lists/oss-security/2010/09/07/12 - Mailing List, Third Party Advisory
References () http://www.redhat.com/support/errata/RHSA-2010-0839.html - Broken Link () http://www.redhat.com/support/errata/RHSA-2010-0839.html - Broken Link
References () http://www.redhat.com/support/errata/RHSA-2011-0007.html - Broken Link () http://www.redhat.com/support/errata/RHSA-2011-0007.html - Broken Link
References () http://www.securityfocus.com/archive/1/520102/100/0/threaded - Third Party Advisory, VDB Entry () http://www.securityfocus.com/archive/1/520102/100/0/threaded - Third Party Advisory, VDB Entry
References () http://www.securityfocus.com/bid/43022 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/43022 - Third Party Advisory, VDB Entry
References () http://www.ubuntu.com/usn/USN-1000-1 - Third Party Advisory () http://www.ubuntu.com/usn/USN-1000-1 - Third Party Advisory
References () http://www.vmware.com/security/advisories/VMSA-2011-0012.html - Third Party Advisory () http://www.vmware.com/security/advisories/VMSA-2011-0012.html - Third Party Advisory
References () http://www.vupen.com/english/advisories/2010/2430 - Broken Link () http://www.vupen.com/english/advisories/2010/2430 - Broken Link
References () http://www.vupen.com/english/advisories/2011/0298 - Broken Link () http://www.vupen.com/english/advisories/2011/0298 - Broken Link
References () https://bugzilla.redhat.com/show_bug.cgi?id=630804 - Issue Tracking, Patch, Third Party Advisory () https://bugzilla.redhat.com/show_bug.cgi?id=630804 - Issue Tracking, Patch, Third Party Advisory
Information

Published : 2010-09-21 18:00

Updated : 2024-11-21 01:17

NVD link : CVE-2010-3078

Mitre link : CVE-2010-3078

CVE.ORG link : CVE-2010-3078

JSON object : View

Products Affected

opensuse

  • opensuse

canonical

  • ubuntu_linux

suse

  • suse_linux_enterprise_desktop
  • suse_linux_enterprise_server

linux

  • linux_kernel

vmware

  • esx
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor


NetmanageIT Website NetmanageIT OSINT Web NetmanageIT OpenCTI NetmanageIT PDF Tools NetmanageIT CTO Corner Blog NetmanageIT Email Header Analyzer NetmanageIT Password Pusher NetmanageIT Internet Health and Latency Dashboard NetmanageIT Dedicated Speed Test Site NetmanageIT Ubuntu Mirror 10Gbps Copyright OpenCVE 2024