CVE-2010-2942

First published: Wed Aug 18 2010(Updated: )

Description of problem: We leak at least 32bits of kernel memory to user land in tc dump, because we dont init all fields (capab ?) of the dumped structure. Use C99 initializers so that holes and non explicit fields are zeroed. <a href="http://patchwork.ozlabs.org/patch/61857/">http://patchwork.ozlabs.org/patch/61857/</a>

Credit: secalert@redhat.com secalert@redhat.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/type
• agent/first-publish-date
• collector/launchpad-cve
• source/Launchpad
• collector/redhat-bugzilla
• source/Red Hat
• alias/CVE-2010-2942
• agent/author
• collector/security-tracker-debian
• source/Debian
• agent/software-canonical-lookup
• agent/weakness
• agent/severity
• collector/nvd-historical
• agent/software-canonical-lookup-request
• collector/nvd-index
• collector/usn-cve
• source/Ubuntu
• agent/remedy
• agent/references
• agent/softwarecombine
• agent/tags
• agent/description
• agent/event
• collector/nvd-cve
• source/NVD
• agent/last-modified-date
• agent/trending
• package-manager/debian
• vendor/linux
• canonical/linux linux kernel
• version/linux linux kernel/2.6.36-rc1
• version/linux linux kernel/2.6.35.13
• version/linux linux kernel/2.6.36
• vendor/canonical
• canonical/canonical ubuntu linux
• version/canonical ubuntu linux/10.10
• version/canonical ubuntu linux/9.04
• version/canonical ubuntu linux/9.10
• version/canonical ubuntu linux/10.04
• version/canonical ubuntu linux/8.04
• version/canonical ubuntu linux/6.06
• vendor/opensuse
• canonical/opensuse opensuse
• version/opensuse opensuse/11.1
• version/opensuse opensuse/11.3
• vendor/suse
• canonical/suse suse linux enterprise server
• version/suse suse linux enterprise server/11-sp1
• canonical/suse suse linux enterprise desktop
• version/suse suse linux enterprise desktop/11-sp1
• version/suse suse linux enterprise server/11
• version/suse suse linux enterprise server/10-sp3
• version/suse suse linux enterprise desktop/10-sp3
• version/suse suse linux enterprise desktop/11
• vendor/avaya
• canonical/avaya aura system manager
• version/avaya aura system manager/6.0
• version/avaya aura system manager/5.2
• canonical/avaya aura communication manager
• version/avaya aura communication manager/5.2
• canonical/avaya voice portal
• version/avaya voice portal/5.1
• version/avaya voice portal/5.1-sp1
• version/avaya voice portal/5.0
• canonical/avaya aura system platform
• version/avaya aura system platform/1.1
• version/avaya aura system platform/6.0
• version/avaya aura system platform/6.0-sp1
• version/avaya aura system manager/6.1
• version/avaya aura system manager/6.1.1
• canonical/avaya aura session manager
• version/avaya aura session manager/1.1
• version/avaya aura session manager/5.2
• version/avaya aura session manager/6.0
• canonical/avaya aura presence services
• version/avaya aura presence services/6.1
• version/avaya aura presence services/6.1.1
• version/avaya aura presence services/6.0
• canonical/avaya iq
• version/avaya iq/5.1
• version/avaya iq/5.0
• vendor/vmware
• canonical/vmware esx
• version/vmware esx/4.1
• version/vmware esx/4.0