CVE-2010-2942

First published: Wed Aug 18 2010(Updated: )

Description of problem: We leak at least 32bits of kernel memory to user land in tc dump, because we dont init all fields (capab ?) of the dumped structure. Use C99 initializers so that holes and non explicit fields are zeroed. <a href="http://patchwork.ozlabs.org/patch/61857/">http://patchwork.ozlabs.org/patch/61857/</a>

Credit: secalert@redhat.com secalert@redhat.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/type
• agent/first-publish-date
• collector/launchpad-cve
• source/Launchpad
• collector/redhat-bugzilla
• source/Red Hat
• alias/CVE-2010-2942
• agent/author
• collector/security-tracker-debian
• source/Debian
• agent/software-canonical-lookup
• agent/weakness
• agent/severity
• collector/usn-cve
• source/Ubuntu
• agent/remedy
• agent/references
• agent/description
• agent/event
• agent/last-modified-date
• agent/trending
• agent/source
• agent/softwarecombine
• agent/tags
• collector/nvd-cve
• source/NVD
• agent/software-canonical-lookup-request
• collector/nvd-historical
• collector/nvd-index
• package-manager/debian
• vendor/linux
• canonical/linux kernel
• version/linux kernel/2.6.35.13
• version/linux kernel/2.6.36
• version/linux kernel/2.6.36-rc1
• vendor/canonical
• canonical/ubuntu linux
• version/ubuntu linux/6.06
• version/ubuntu linux/8.04
• version/ubuntu linux/9.04
• version/ubuntu linux/9.10
• version/ubuntu linux/10.04
• version/ubuntu linux/10.10
• vendor/opensuse
• canonical/opensuse
• version/opensuse/11.1
• version/opensuse/11.3
• vendor/suse
• canonical/suse linux enterprise desktop
• version/suse linux enterprise desktop/10-sp3
• version/suse linux enterprise desktop/11
• version/suse linux enterprise desktop/11-sp1
• canonical/suse linux enterprise server
• version/suse linux enterprise server/10-sp3
• version/suse linux enterprise server/11
• version/suse linux enterprise server/11-sp1
• vendor/avaya
• canonical/avaya aura communication manager
• version/avaya aura communication manager/5.2
• canonical/avaya aura presence services
• version/avaya aura presence services/6.0
• version/avaya aura presence services/6.1
• version/avaya aura presence services/6.1.1
• canonical/avaya aura session manager
• version/avaya aura session manager/1.1
• version/avaya aura session manager/5.2
• version/avaya aura session manager/6.0
• canonical/avaya aura system manager
• version/avaya aura system manager/5.2
• version/avaya aura system manager/6.0
• version/avaya aura system manager/6.1
• version/avaya aura system manager/6.1.1
• canonical/avaya aura system platform
• version/avaya aura system platform/1.1
• version/avaya aura system platform/6.0
• version/avaya aura system platform/6.0-sp1
• canonical/avaya iq
• version/avaya iq/5.0
• version/avaya iq/5.1
• canonical/avaya voice portal
• version/avaya voice portal/5.0
• version/avaya voice portal/5.1
• version/avaya voice portal/5.1-sp1
• vendor/vmware
• canonical/vmware esx
• version/vmware esx/4.0
• version/vmware esx/4.1