2.1
CVE-2011-2495
- EPSS 0.48%
- Veröffentlicht 13.06.2012 10:24:55
- Zuletzt bearbeitet 16.06.2026 23:31:27
- CVE-Watchlists
- Unerledigt
Loginfs/proc/base.c in the Linux kernel before 2.6.39.4 does not properly restrict access to /proc/#####/io files, which allows local users to obtain sensitive I/O statistics by polling a file, as demonstrated by discovering the length of another user's password.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version <= 2.6.39.3
Linux ≫ Linux Kernel Version2.6.39
Linux ≫ Linux Kernel Version2.6.39 Updaterc1
Linux ≫ Linux Kernel Version2.6.39 Updaterc2
Linux ≫ Linux Kernel Version2.6.39 Updaterc3
Linux ≫ Linux Kernel Version2.6.39 Updaterc4
Linux ≫ Linux Kernel Version2.6.39 Updaterc5
Linux ≫ Linux Kernel Version2.6.39 Updaterc6
Linux ≫ Linux Kernel Version2.6.39 Updaterc7
Linux ≫ Linux Kernel Version2.6.39.1
Linux ≫ Linux Kernel Version2.6.39.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.48% | 0.378 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 2.1 | 3.9 | 2.9 |
AV:L/AC:L/Au:N/C:P/I:N/A:N
|
http://rhn.redhat.com/errata/RHSA-2011-1212.html
http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39.4
http://www.openwall.com/lists/oss-security/2011/06/27/1
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1d1221f375c94ef961ba8574ac4f85c8870ddd51
https://bugzilla.redhat.com/show_bug.cgi?id=716825
https://github.com/torvalds/linux/commit/1d1221f375c94ef961ba8574ac4f85c8870ddd51