CVE-2011-2495: Infoleak
/proc/PID/io may be used for gathering private information. E.g. for openssh and vsftpd daemons wchars/rchars may be used to learn the precise password length.
[0/2] restrict statistics information to user https://lkml.org/lkml/2011/6/24/88 [1/2] proc: restrict access to /proc/PID/io (CVE-2011-2495) https://patchwork.kernel.org/patch/916032/ [2/2] taskstats: restrict access to user (CVE-2011-2494) https://patchwork.kernel.org/patch/916042/
taskstats authorizedkeys presence infoleak PoC http://seclists.org/oss-sec/2011/q2/659
Acknowledgements:
Red Hat would like to thank Vasiliy Kulikov of Openwall for reporting this issue.
Other sources
fs/proc/base.c in the Linux kernel before 2.6.39.4 does not properly restrict access to /proc/#####/io files, which allows local users to obtain sensitive I/O statistics by polling a file, as demonstrated by discovering the length of another user's password.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2495?
CVE-2011-2495 is considered a medium severity vulnerability due to its potential to leak sensitive information.
How do I fix CVE-2011-2495?
To fix CVE-2011-2495, upgrade the Linux kernel to a version greater than or equal to 2.6.39.4.
Which systems are affected by CVE-2011-2495?
CVE-2011-2495 affects specific versions of the Linux kernel, particularly version 2.6.39 and its release candidates.
Can CVE-2011-2495 be exploited remotely?
CVE-2011-2495 is primarily a local vulnerability, requiring access to the affected system to exploit.
What types of information can be leaked through CVE-2011-2495?
CVE-2011-2495 can potentially leak sensitive information such as the length of the passwords being used by processes running on the system.