CVE-2010-4077: Infoleak
Description of problem: The TIOCGICOUNT device ioctl in nozomi.c allows unprivileged users to read uninitialized stack memory, because the "reserved" member of the serialicounterstruct struct declared on the stack is not altered or zeroed before being copied back to the user.
Reference: http://www.openwall.com/lists/oss-security/2010/10/06/6 http://lkml.indiana.edu/hypermail//linux/kernel/1009.1/03387.html
Acknowledgements:
Red Hat would like to thank Dan Rosenberg for reporting this issue.
Other sources
The nttyioctltiocgicount function in drivers/char/nozomi.c in the Li ...
— Debian
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4077?
CVE-2010-4077 is considered to have a medium severity due to the potential for unprivileged users to access sensitive information.
How do I fix CVE-2010-4077?
To fix CVE-2010-4077, update your Linux kernel to a version later than 2.6.36.1 where this issue has been addressed.
Who is affected by CVE-2010-4077?
CVE-2010-4077 affects users of the Linux kernel versions up to and including 2.6.36.1.
What type of vulnerability is CVE-2010-4077?
CVE-2010-4077 is a memory disclosure vulnerability caused by uninitialized stack memory exposure.
Can CVE-2010-4077 be exploited remotely?
CVE-2010-4077 requires local access to the system to exploit, making remote exploitation unlikely.