1.9

CVE-2010-4072

EPSS 0.1%
Published 29.11.2010 16:00:02
Last modified 11.04.2025 00:51:21
Source cve@mitre.org
Teams watchlist Login
Open Login

The copy_shmid_to_user function in ipc/shm.c in the Linux kernel before 2.6.37-rc1 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to the shmctl system call and the "old shm interface."

Affected products Warnungen 0 Metrics 2 CWE 1 References 42

Data is provided by the National Vulnerability Database (NVD)

Linux ≫ Linux Kernel Version < 2.6.37

Linux ≫ Linux Kernel Version2.6.37 Update-

Opensuse ≫ Opensuse Version11.3

Suse ≫ Linux Enterprise Desktop Version10 Updatesp3

Suse ≫ Linux Enterprise Desktop Version11 Updatesp1

Suse ≫ Linux Enterprise Real Time Extension Version11 Updatesp1

Suse ≫ Linux Enterprise Server Version9

Suse ≫ Linux Enterprise Server Version10 Updatesp3

Suse ≫ Linux Enterprise Server Version11 Updatesp1

Suse ≫ Linux Enterprise Software Development Kit Version10 Updatesp3

Debian ≫ Debian Linux Version5.0

Canonical ≫ Ubuntu Linux Version6.06

Canonical ≫ Ubuntu Linux Version9.10

Canonical ≫ Ubuntu Linux Version10.04 SwEdition-

Canonical ≫ Ubuntu Linux Version10.10

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.1%	0.24

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	1.9	3.4	2.9	AV:L/AC:M/Au:N/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www.mandriva.com/security/advisories?name=MDVSA-2011:051

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2011:029

Third Party Advisory

http://secunia.com/advisories/46397

Third Party Advisory

http://www.securityfocus.com/archive/1/520102/100/0/threaded

Third Party Advisory

VDB Entry

http://www.vmware.com/security/advisories/VMSA-2011-0012.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html

Third Party Advisory

Mailing List

http://www.vupen.com/english/advisories/2011/0298

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html

Third Party Advisory

Mailing List

http://secunia.com/advisories/42778

Third Party Advisory

http://www.vupen.com/english/advisories/2011/0012

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html

Third Party Advisory

Mailing List

http://secunia.com/advisories/42890

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2011-0007.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html

Third Party Advisory

Mailing List

http://secunia.com/advisories/43291

Third Party Advisory

http://www.debian.org/security/2010/dsa-2126

Third Party Advisory

http://www.vupen.com/english/advisories/2011/0375

Third Party Advisory

http://secunia.com/advisories/42758

Third Party Advisory

http://www.ubuntu.com/usn/USN-1041-1

Third Party Advisory

http://www.vupen.com/english/advisories/2011/0070

Third Party Advisory

http://secunia.com/advisories/43161

Third Party Advisory

http://www.ubuntu.com/usn/USN-1057-1

Third Party Advisory

http://www.vupen.com/english/advisories/2011/0280

Third Party Advisory

http://secunia.com/advisories/42884

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2011-0017.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html

Third Party Advisory

Mailing List

http://secunia.com/advisories/42932

Third Party Advisory

http://www.vupen.com/english/advisories/2011/0124

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2010-0958.html

Third Party Advisory

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3af54c9bd9e6f14f896aac1bb0e8405ae0bc7a44

http://lkml.org/lkml/2010/10/6/454

Patch

Third Party Advisory

http://secunia.com/advisories/42963

Third Party Advisory

http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.37-rc1

Broken Link

http://www.openwall.com/lists/oss-security/2010/10/07/1

Third Party Advisory

Mailing List

http://www.openwall.com/lists/oss-security/2010/10/25/3

Third Party Advisory

Mailing List

http://www.redhat.com/support/errata/RHSA-2011-0162.html

Third Party Advisory

http://www.securityfocus.com/bid/45054

Third Party Advisory

VDB Entry

http://www.vupen.com/english/advisories/2011/0168

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=648656

Third Party Advisory

Issue Tracking

https://nvd.nist.gov/vuln/detail/CVE-2010-4072

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-4072

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-4072

EUVD