CVE-2010-4073: Infoleak
Description of problem: The compat ipc functions allow unprivileged users to read uninitialized stack memory, because some of the structures used and declared on the stack are not altered or zeroed before being copied back to the user.
Reference: http://www.openwall.com/lists/oss-security/2010/10/07/1 http://lkml.org/lkml/2010/10/6/492
Acknowledgements:
Red Hat would like to thank Dan Rosenberg for reporting this issue.
Other sources
The ipc subsystem in the Linux kernel before 2.6.37-rc1 does not initi ...
— Debian
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4073?
The severity of CVE-2010-4073 is considered medium due to the potential for unprivileged users to read uninitialized stack memory.
How do I fix CVE-2010-4073?
To fix CVE-2010-4073, update to a kernel version later than 2.6.37 which addresses the vulnerability.
What types of systems are affected by CVE-2010-4073?
CVE-2010-4073 affects various distributions that use the Linux kernel versions prior to 2.6.37.
What is the nature of the flaw in CVE-2010-4073?
The flaw in CVE-2010-4073 allows unprivileged users to access uninitialized stack memory due to inadequate cleanup of stack structures.
Is CVE-2010-4073 a remote exploit vulnerability?
No, CVE-2010-4073 requires local access to exploit the vulnerability because it involves reading stack memory.