2.1

CVE-2010-2955

The cfg80211_wext_giwessid function in net/wireless/wext-compat.c in the Linux kernel before 2.6.36-rc3-next-20100831 does not properly initialize certain structure members, which allows local users to leverage an off-by-one error in the ioctl_standard_iw_point function in net/wireless/wext-core.c, and obtain potentially sensitive information from kernel heap memory, via vectors involving an SIOCGIWESSID ioctl call that specifies a large buffer size.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 2.6.36
Linux ≫ Linux Kernel Version2.6.36 Update-
Linux ≫ Linux Kernel Version2.6.36 Updaterc1
Linux ≫ Linux Kernel Version2.6.36 Updaterc2
Opensuse ≫ Opensuse Version11.1
Suse ≫ Linux Enterprise Desktop Version11 Update-
Suse ≫ Linux Enterprise Real Time Extension Version11 Updatesp1
Suse ≫ Linux Enterprise Server Version11 Update-
Canonical ≫ Ubuntu Linux Version6.06
Canonical ≫ Ubuntu Linux Version8.04 SwEdition-
Canonical ≫ Ubuntu Linux Version9.04
Canonical ≫ Ubuntu Linux Version9.10
Canonical ≫ Ubuntu Linux Version10.04 SwEdition-
Canonical ≫ Ubuntu Linux Version10.10
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.42% 0.33
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
CWE-193 Off-by-one Error

A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.

http://www.redhat.com/support/errata/RHSA-2010-0771.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html
Third Party Advisory
Mailing List
http://www.ubuntu.com/usn/USN-1000-1
Third Party Advisory
http://www.vupen.com/english/advisories/2011/0298
Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2010-0842.html
Third Party Advisory
http://forums.grsecurity.net/viewtopic.php?f=3&t=2290
Third Party Advisory
http://git.kernel.org/?p=linux/kernel/git/linville/wireless-2.6.git%3Ba=commit%3Bh=42da2f948d949efd0111309f5827bf0298bcc9a4
http://grsecurity.net/~spender/wireless-infoleak-fix2.patch
Broken Link
http://lkml.org/lkml/2010/8/27/413
Patch
Third Party Advisory
Mailing List
http://lkml.org/lkml/2010/8/30/127
Patch
Third Party Advisory
Mailing List
http://lkml.org/lkml/2010/8/30/146
Patch
Third Party Advisory
Mailing List
http://lkml.org/lkml/2010/8/30/351
Patch
Third Party Advisory
Mailing List
http://secunia.com/advisories/41245
Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.36-rc3-next-20100831.bz2
Broken Link
http://www.openwall.com/lists/oss-security/2010/08/31/1
Patch
Third Party Advisory
Mailing List
http://www.securityfocus.com/bid/42885
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=628434
Third Party Advisory
Issue Tracking