CVE-2009-3612: Infoleak
First published: Thu Oct 08 2009(Updated: )
Quote from <a href="http://patchwork.ozlabs.org/patch/35412/">http://patchwork.ozlabs.org/patch/35412/</a>: Commit 9ef1d4c7c7aca1cd436612b6ca785b726ffb8ed8 introduced a typo in initialization.
Credit: secalert@redhat.com secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/kernel-rt | <0:2.6.24.7-137.el5 | 0:2.6.24.7-137.el5 |
| redhat/kernel | <0:2.6.18-164.9.1.el5 | 0:2.6.18-164.9.1.el5 |
| Linux Linux kernel | =2.6.32-rc1 | |
| Linux Linux kernel | =2.6.32-rc4 | |
| Linux Linux kernel | <=2.4.37.6 | |
| Linux Linux kernel | =2.6.32-rc3 | |
| Linux Linux kernel | =2.6.32-rc2 | |
| Linux Linux kernel | =2.6.32 | |
| Linux Linux kernel | >=2.6.0<2.6.32 | |
| SUSE Linux Enterprise Server | =10-sp3 | |
| openSUSE openSUSE | =11.0 | |
| SUSE Linux Enterprise Server | =10-sp2 | |
| SUSE Linux Enterprise Desktop | =10-sp2 | |
| SUSE Linux Enterprise Software Development Kit | =10-sp2 | |
| SUSE Linux Enterprise Desktop | =10-sp3 | |
| SUSE Linux Enterprise Software Development Kit | =10-sp3 | |
| Canonical Ubuntu Linux | =9.04 | |
| Canonical Ubuntu Linux | =8.10 | |
| Canonical Ubuntu Linux | =9.10 | |
| Canonical Ubuntu Linux | =8.04 | |
| Canonical Ubuntu Linux | =6.06 | |
| Fedoraproject Fedora | =10 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ad61df918c44316940404891d5082c63e79c256a
- http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html
- http://lists.vmware.com/pipermail/security-announce/2010/000082.html
- http://patchwork.ozlabs.org/patch/35412/
- http://secunia.com/advisories/37086
- http://secunia.com/advisories/37909
- http://secunia.com/advisories/38794
- http://secunia.com/advisories/38834
- http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc5
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:329
- http://www.openwall.com/lists/oss-security/2009/10/14/1
- http://www.openwall.com/lists/oss-security/2009/10/14/2
- http://www.openwall.com/lists/oss-security/2009/10/15/1
- http://www.openwall.com/lists/oss-security/2009/10/15/3
- http://www.redhat.com/support/errata/RHSA-2009-1670.html
- http://www.ubuntu.com/usn/usn-864-1
- http://www.vupen.com/english/advisories/2010/0528
- https://bugzilla.redhat.com/show_bug.cgi?id=528868
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10395
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7557
- https://rhn.redhat.com/errata/RHSA-2009-1540.html
- https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html
- https://access.redhat.com/security/cve/CVE-2005-4881
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff_plain;h=ad61df918c44316940404891d5082c63e79c256a
- http://admin.fedoraproject.org/updates/kernel-2.6.30.9-90.fc11
- https://access.redhat.com/security/cve/CVE-2009-3612
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ad61df918c44316940404891d5082c63e79c256a
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=521602
- http://admin.fedoraproject.org/updates/kernel-2.6.27.38-170.2.113.fc10
- https://rhn.redhat.com/errata/RHSA-2009-1670.html
- https://www.cve.org/CVERecord?id=CVE-2009-3612 https://nvd.nist.gov/vuln/detail/CVE-2009-3612
- https://access.redhat.com/errata/RHSA-2009:1540
- https://access.redhat.com/errata/RHSA-2009:1522
- https://access.redhat.com/errata/RHSA-2009:1670
- https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3612.json
Parent vulnerabilities
(Appears in the following advisories)
- agent/type
- agent/author
- agent/remedy
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2009-3612
- agent/severity
- agent/references
- agent/weakness
- collector/redhat-cve
- agent/software-canonical-lookup
- agent/description
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-api
- collector/nvd-index
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/tags
- agent/event
- agent/trending
- package-manager/redhat
- vendor/linux
- canonical/linux linux kernel
- version/linux linux kernel/2.6.32-rc1
- version/linux linux kernel/2.6.32-rc4
- version/linux linux kernel/2.4.37.6
- version/linux linux kernel/2.6.32-rc3
- version/linux linux kernel/2.6.32-rc2
- version/linux linux kernel/2.6.32
- version/linux linux kernel/2.6.0
- vendor/suse
- canonical/suse linux enterprise server
- version/suse linux enterprise server/10-sp3
- vendor/opensuse
- canonical/opensuse opensuse
- version/opensuse opensuse/11.0
- version/suse linux enterprise server/10-sp2
- canonical/suse linux enterprise desktop
- version/suse linux enterprise desktop/10-sp2
- canonical/suse linux enterprise software development kit
- version/suse linux enterprise software development kit/10-sp2
- version/suse linux enterprise desktop/10-sp3
- version/suse linux enterprise software development kit/10-sp3
- vendor/canonical
- canonical/canonical ubuntu linux
- version/canonical ubuntu linux/9.04
- version/canonical ubuntu linux/8.10
- version/canonical ubuntu linux/9.10
- version/canonical ubuntu linux/8.04
- version/canonical ubuntu linux/6.06
- vendor/fedoraproject
- canonical/fedoraproject fedora
- version/fedoraproject fedora/10